Loading today’s stories
Security1 distinct publisher2 min readPublished
KB5120998 carries 35 quality changes and no security fixes, which puts the real deadline in September. The parts worth testing before then are the taskbar and Start menu rework and the removal of WMIC.
The Watch · Security desk
security
Microsoft is investigating whether its own August Patch Tuesday build breaks apps on Windows 111 distinct publisher
security
Windows 11's secure kernel trusts a RAM chip that never checks who is writing to it1 distinct publisher
build
wmic is gone, and Node's process trees on Windows 11 now come back empty1 distinct publisher
security
Windows 11 splits the device-wide camera toggle into per-app switches for desktop apps1 distinct publisher
Compiled by The WatchSomething wrong?How this is made
A preview cumulative update is next month's package with the security content stripped out. Microsoft's stated purpose for KB5120998 is to let administrators test fixes, improvements, and new features before they reach everyone in next month's Patch Tuesday [2]. Installed, it takes 25H2 to build 26200.9278 and 24H2 to 26100.9278 [6], and it does not arrive on its own unless the "get the latest updates as soon as they're available" toggle is set; otherwise it needs a deliberate click or a manual pull from the Microsoft Update Catalog [7], which is delivery built for a pilot ring.
What deserves the lab time is the shell work, because locked-down images pin it. This build adds a reduced-height taskbar with smaller icons, small and large Start menu sizes, independent show and hide controls for the Pinned, Recommended, and All sections, and the option to hide the account name and profile picture [5]. Kiosk, VDI, and shared-desktop images that enforce those elements by policy either survive it or do not, and whatever breaks in a lab this month breaks in September with a security deadline attached.
Microsoft's own wording on administrator protection is the line to copy into a control matrix: "Administrator protection is not classified as a formal security boundary; it hardens the security against elevation-of-privilege attacks with the introduction of profile separation" [10]. It ships off by default and is turned on through Intune OMA-URI or Group Policy [11]. It is not something a device gets by accident, and teams should not credit it as a mitigation until they have actually enabled it.
One item is a privacy review rather than a patch review. Windows now indexes your most-used folders automatically so those files appear in later search results, with the control at Settings > Privacy & Security > Search [16].
The reboot arithmetic comes next. Microsoft said on Thursday that a limited number of consumer and business devices might take one additional restart during installation of the August optional update, and of updates rolling out over the next several months, after a Secure Boot certificate update is applied [12]. That belongs to whoever owns the maintenance window, not the vulnerability queue.
The lifecycle dates set the harder clock. Home and Pro on 24H2 stop receiving updates two months from the August notice, which puts them at roughly October 2026, while 24H2 Enterprise and Education stay in mainstream support until October 2027 [13][14]. The gap is twelve months, and only the managed editions get it [15].
Ranked by verification strength, evidence, and original report placement.
Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, containing 35 changes including improvements to the Start menu, taskbar, and Windows search.
KB5120998 is a preview update that lets IT administrators test Windows bug fixes, improvements, and new features before they roll out to all users during next month's Patch Tuesday release.
Unlike cumulative updates, monthly optional updates do not include security fixes and provide only quality improvements.
After installing the August 2026 preview update, users can move the taskbar to the bottom, top, left, or right side of the screen in Settings > Personalization > Taskbar > Taskbar behaviors > Taskbar position, with most customization settings, such as never combining taskbar icons, working in every position.
KB5120998 adds a smaller taskbar option that reduces taskbar height and icon size, small and large size options for the Start menu, the ability to independently show or hide the Pinned, Recommended, and All sections, and the ability to hide the account name and profile picture.
The optional non-security update upgrades Windows 11 25H2 and 24H2 devices to builds 26200.9278 and 26100.9278 respectively.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 28, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
One outlet, but checkable artifacts
Almost everything here can be verified by an administrator in ten minutes: a KB number, two resulting build numbers, exact settings paths, and two direct Microsoft quotations on administrator protection and the Secure Boot restart. That is unusually falsifiable for a single-source story. What holds the score down is that BleepingComputer is the only voice, the 35-change count is Microsoft's own tally repeated without audit, and the piece's closing line dates 25H2 to September 2024 — an internal slip that suggests the surrounding detail was transcribed rather than checked.
Shipped to everyone, installed by nobody we can count
The update is genuinely out — Windows Update and the Update Catalog both carry it, and administrator protection has started rolling out — so availability is real rather than announced. But an optional preview only lands where someone clicks 'Download and install', the marquee security feature arrives switched off pending an Intune or Group Policy push, and this reporting offers no install figures, no telemetry and no example of an organisation that has deployed it. Availability is confirmed; uptake is entirely unobserved.
Cosmetics lead, breaking changes trail
If anything this story sells itself short. The taskbar moving to the left edge and the Start menu's hideable sections get the top of the piece; WMIC's removal — an unannounced-feeling break for every script that still calls it — appears as the fifth bullet in a highlights list, and the servicing cutoff for Home and Pro 24H2 lands in the second-to-last paragraph. Microsoft's own caveat that administrator protection is not a formal security boundary is quoted faithfully instead of being inflated into a security win. Nothing is overstated; the consequential material is just filed below the pretty material.
Vendor notes in, sponsor pitch out
The sourcing runs one way: Microsoft describes its own update, its own new privilege feature and its own reboot side effect, and the reporting relays that framing down to the recommendation that customers move to 25H2 — which is also what Microsoft wants. The reader-facing tell is at the other end of the piece, where a vendor's 2026 security report and a 'Get the report' call to action are appended to the news copy. Neither pressure is concealed, and the Microsoft quotes are marked as quotes, so this is ordinary press-release-adjacent reporting rather than anything captured.
Firm on the what, thin on the how many
We would stake a lot on the mechanics — the KB identifier, the builds, the settings paths, the fact that this update carries no security fixes — because they are specific and independently checkable. We would stake very little on scale or consequence: 'a limited number of devices' is Microsoft's phrase and no one has bounded it, the two-month servicing warning is relative rather than dated, and with a single publisher a transcription error like the 25H2 availability date can survive unchallenged. High confidence in the instructions, low confidence in the impact estimates.