Microsoft Paint has a serious flaw that allows remote attacks on Windows 11

Microsoft faces accusations of employing unfair methods to promote its Edge browser. These tactics include displaying intrusive advertising and modifying file standards, aiming to make it difficult for users to switch to other browsing options.

A report prepared by the Browser Choice Alliance (BCA) details ten such 'dark patterns' used by the company, such as opening links directly in Edge even when another browser is already set as default.

To date, Microsoft has not issued an official statement regarding these allegations. Although Microsoft's effort to increase Edge's market presence is well known, the BCA argues that the company resorts to unethical strategies to foster its browser.

The BCA released a 46-page document describing ten 'dirty tricks' implemented by Microsoft for this purpose. The BCA is a coalition composed of organizations that develop browsers and which primarily advocate for the right of Windows users to freely choose which browser to use. Members of this alliance include companies such as Google, Vivaldi, Opera, Midori, Wavebox, and BrowserWorks.

This report was produced by the Behavioural Insights Team (BIT) and fundamentally describes the strategies that Microsoft would be applying to prevent users from migrating from Edge to a competing browser. These strategies are classified as 'dark patterns,' meaning 'obscure patterns' in free translation. These patterns refer to technical or design approaches that seek to lead the user to perform actions they would not voluntarily take.

What are the dark patterns adopted by Microsoft regarding Edge?

The study conducted by BIT identifies ten dark patterns, distributed across three distinct categories (or phases).

Category 1: From installing an alternative browser

In this first category, the following points are observed: intrusive ads, where the user encounters banners or calls in services like Bing when using Edge to search about other browsers, trying to convince them to stay on Edge; fragmented standard modification, in which Microsoft tries to establish Edge as the default for specific file formats (such as PDF), forcing the user to redefine their chosen software for different file types multiple times; and the restriction of Mode S, which prevents the installation of rival browsers if Windows is operating in Mode S (a security-focused restricted mode).

Category 2: Of forced Edge usage

Forced usage mechanisms include the Windows search bar, which opens local search results in Edge even if another browser is set as default; widgets and lock screen links, which also open results in Edge despite the default being different; the news feed, as featured news in Windows 10 opens in Edge when another browser is set as default; links present in Outlook and Teams, which automatically open in Edge, requiring the user to manually configure this behavior for another browser; the blocking of third-party tools that attempt to prevent link redirection to the Microsoft browser; and the forced opening of tabs in Edge immediately after logging in, allowing the system to start Edge automatically even if a different browser is selected as default.

Category 3: Of operating system updates

Finally, the third category deals with improper configuration after system updates, where Microsoft attempts again to set Edge as the default after Windows receives a major update.

Users of Microsoft Authenticator for Android should ensure they have the latest version of the application installed on their devices. This update corrects a critical vulnerability that could allow an attacker access to authentication credentials across various services.

The flaw was identified by the digital security company Enclave and received a score of 8.6 (on a scale of 10) in the CVSS 3.1 system, indicating a very high level of severity. According to Enclave, an attacker could exploit this vulnerability by creating an Android application, even without special permissions, pretending to be an official Microsoft application to force Authenticator to send corresponding authentication tokens.

With these tokens in hand, the attacker could gain access to the user's accounts on multiple platforms. In tests conducted by Enclave, it was possible to access confidential information such as emails, calendars, and files.

Enclave notified Microsoft about the vulnerability, and Microsoft acknowledged the issue through the registration CVE-2026-80097, which was made public on September 8, 2026. Although the technical details were only recently disclosed by Enclave, the initial communication occurred promptly.

To mitigate the risk, it is recommended to install version 6.2606.4246 or higher of Microsoft Authenticator. You can check the installed version on your Android phone or tablet by accessing the Microsoft Authenticator page on the Google Play Store.

Microsoft Authenticator is an application compatible with Android and iOS that facilitates two-factor authentication in numerous services. Furthermore, it serves to generate temporary verification codes for logins and allows access to certain Microsoft services without the need to type passwords.

Microsoft has announced an offer to several employees in India and three other countries to leave their jobs voluntarily. According to available data, about 60,000 workers are eligible to participate in this buyout program. This announcement has caused significant concern among the company's staff.

One Indian software developer shared his experience after receiving such an offer. He stated that he received the corresponding email just three months after starting at Microsoft.

This employee posted his story on the social platform Reddit. The user with the nickname clock-maker365 published a post in the subreddit r/developersindia. In his message, he expressed strong concern, noting that he had joined Microsoft only three months ago and had very limited knowledge of the codebase. This initial post was subsequently deleted.

The developer received an email just a few hours ago setting a deadline for deciding his future—December 1st. The post mentioned that the email arrived approximately three hours before publication. Microsoft is offering 60 thousand employees the option of voluntary retirement. The essence of the offer is receiving monetary compensation upon concluding one's career at Microsoft on December 31st. The application deadline is set for December 1st.

The developer clarified in his post that this email was not sent to all company employees. He emphasized that although the offer is addressed to many, it was received only by selected individuals, and he is one of them. The developer stated that even if he declines the offer, Microsoft might fire him from the company. He speculated that receiving such an email means his name is on a reduction list, and the company will ensure his departure somehow.

Microsoft has not commented on the concerns regarding the start of a new round of layoffs. Nevertheless, earlier this year, the company had already offered some senior employees voluntary retirement, after which about 4,800 people were laid off.

The developer also expressed deep confusion, noting that despite working hard for the past three months, he is extremely worried about his future. He questioned why he worked so hard only to end up in this unstable situation in a large corporation's job market? He reached out to Reddit users for advice regarding his future, as he had no backup plan. He mentioned having three years of experience, no family business, and only six months of savings. He mentioned that he could do DSA but doubted the demand for this skill, considering it one of the least useful competencies. He asked what he should do.

Although the post itself was deleted from Reddit, the developer informed commenters about the size of the severance package offered to him. He was offered compensation equivalent to two or three months of base salary plus one week of base salary, as well as two weeks of base salary for six months of work. Another user noted that having Microsoft on one's resume would help the developer easily find a new job, arguing that whoever can work at Microsoft can succeed in any company. Another user stated that they joined the company a month ago and received the same offer, advising the correspondent to save money and prepare, as the market for those who work at MSFT is not that bad.