[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftKN2fhDcyu9NIm70gKJR0yN9D95W-PblYGzZCFZOQwk":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":20,"status":21,"created_at":22,"published_at":23,"article":24,"tags":28,"podcasts":41,"controls":42},"486465d2-416c-4782-9672-b3158beb4b09","microsoft-september-update-breaks-windows-file-history-backup","060a4626-f6cb-405b-9b9c-ac90138ddac5","Microsoft September Update Breaks Windows File History Backup","Microsoft's September 2026 security updates introduced a regression that disables the File History backup feature across Windows 10 and Windows 11, leaving users without functional backups and unable to access previous file versions. This highlights a critical risk where the very act of patching — essential for security — can inadvertently undermine data protection capabilities. Organizations relying solely on File History as their backup strategy are now exposed to potential data loss during the window between the broken update and a fix. This incident underscores why backup systems must be independently verified after every major update cycle, and why redundant backup strategies are non-negotiable.","**Immediate actions:**\n- Verify that all backup solutions (including File History) are fully operational after installing any Windows security update.\n- Deploy the Microsoft-issued fix or workaround as soon as it becomes available, and prioritize affected systems in your patch rollout queue.\n\n**Long-term improvements:**\n- Implement a layered backup strategy (e.g., File History + cloud backup + offline\u002Foffsite backup) so no single failure point eliminates all recovery options.\n- Establish a post-patch validation checklist that explicitly tests backup and recovery functionality before marking a deployment as successful.\n- Maintain a staged patch deployment process (test ring → pilot ring → broad deployment) to catch regressions before they affect the entire organization.\n\n**Detection & monitoring measures:**\n- Configure automated backup health monitoring and alerting to notify administrators immediately when backup jobs fail or are interrupted.\n- Subscribe to Microsoft's Windows Health Dashboard and security advisories to receive early warnings about known update issues.",[12,13,14,15,16,17,18,19],"CIS Control 11 – Data Recovery","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-34 – Contingency Planning Guide","NIST SI-2 – Flaw Remediation","NIST CP-9 – Information System Backup","ITIL Change Management – Change Validation and Testing","ISO\u002FIEC 27001 – A.12.3 Information Backup","GDPR Article 32 – Security of Processing (data availability and resilience)",{},"published","2026-09-21T12:20:38.32272+00:00","2026-09-21T12:20:37.982+00:00",{"id":7,"url":25,"slug":26,"title":27},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-september-updates-break-file-history-backup-feature\u002F","microsoft-september-updates-break-file-history-backup-feature-862b35","Microsoft: September updates break File History backup feature",[29,35],{"id":30,"name":31,"slug":32,"description":33,"color":34},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",{"id":36,"name":37,"slug":38,"description":39,"color":40},"c8ff5d73-dec9-4911-88ee-ed016a89f3f4","Backup & Recovery","backup-recovery","No backups, untested recovery, ransomware impact","#f43f5e",[],[43,46],{"slug":32,"name":44,"problem":45},"Automated patch management","Known holes get closed in days, not months.",{"slug":47,"name":48,"problem":49},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back."]