Advisories
Microsoft Hardening Changes to ReFS Volumes on Removable Media – Oct 13 2026 Update
Starting with the October 13 2026 Windows update, Microsoft introduces hardening controls to ReFS volumes on removable media. The changes are not enabled by default until 2027, so defenders should verify update status and adjust security controls accordingly.
What happened
Microsoft released a Windows update on October 13 2026 that adds hardening controls to ReFS volumes residing on removable media. The changes are part of a broader effort to secure file system access on portable devices.
Impact
Systems that use ReFS on USB drives, SD cards, or other removable media will receive the hardening changes once the update is installed. The new settings are not active by default; they will be enabled automatically in the 2027 update cycle.
What to do
- Confirm that the October 13 2026 update has been applied to all Windows endpoints.
- Review any ReFS volumes on removable media and note that hardening will be enforced in 2027.
- Adjust your security policies (e.g., device control, access control lists) to account for the stricter permissions that will be applied.
- Monitor for any operational impact on applications that rely on legacy ReFS behavior.
Related articles
Windows Server 2022 Slips Into Extended Support Next Month—Plan Your Upgrade to 2025 Before 2031
Microsoft announced that Windows Server 2022 will exit mainstream support on Oct 13 2026, sliding into a five‑year extended phase that ends Oct 14 2031. Hotpatching for the Datacenter: Azure Edition stays active until Oct 2027, while the free Windows 10 ESU program now runs until Oct 12 2027. Admins are urged to begin testing Windows Server 2025, which launched in 2024 and will stay mainstream until Nov 13 2029 with extended support until 2034. A free 180‑day trial is available via the Microsoft Evaluation Center. Early migration is key to keep your environment secure and compliant.
Read briefing
Huntress Introduces Dual Deployment Modes for Microsoft 365 Hardening
Huntress now offers Managed ISPM with two deployment options: fully automated hardening or granular control over Microsoft 365 settings. Security teams can choose the approach that fits their governance model. This update enables tighter control of identity and email defenses across Microsoft 365.
Read briefing
CVE-2026-50357: Windows ReFS Elevation of Privilege Vulnerability
A flaw in Windows Resilient File System (ReFS) permits local attackers to elevate privileges on affected systems. Windows machines with ReFS enabled are vulnerable. Apply the latest security update or disable ReFS to mitigate.
Read briefing
Microsoft Releases Critical Patches for 18 Azure and AI Product Vulnerabilities
Microsoft issued critical patches for 18 vulnerabilities affecting Azure services and Copilot AI products, primarily privilege‑elevation flaws. The fixes are server‑side and no exploitation has been reported. Defenders should update affected components and verify configuration changes.
Read briefing