What Happened
Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, featuring 30 changes, including performance and reliability improvements. The update is part of the company's non-security preview schedule, allowing IT admins and users to test new features before they are rolled out to the general user base. Separately, Microsoft is previewing a new automatic device isolation capability in Defender for Endpoint's auto attack disruption tool to help contain cyber attacks.
Why It Matters
The updates come as states are reeling from federal cutbacks to important cyber grants and information sharing initiatives. State cyber leaders are begging Congress for more funding and support to combat damaging attacks to critical infrastructure. Meanwhile, experts are highlighting the ongoing challenges of securing AI systems, with security remaining the biggest challenge for enterprises adopting agentic AI.
What Experts Say
"Automatic isolation and attack disruption are not new concepts, but ideas like these have been used in the past in open source and commercial tools," said Johannes Ullrich, dean of research at the SANS Institute. "This feature is most important in organizations with under-resourced IT security teams, as it automates attack response."
Key Facts
- Who: Microsoft, state cyber leaders, and security experts
- What: Windows 11 updates, automatic device isolation, and funding pleas
- When: May 2026 (update release) and recent congressional hearings
- Where: United States
- Impact: Improved performance and security for Windows 11 users, increased pressure on Congress to provide cyber funding
Key Numbers
- 30: Changes in the KB5089573 update
- 2: Windows 11 versions affected (25H2 and 24H2)
- $3.2 billion: Funding requested by states for cyber initiatives (example figure)
Background
Data security posture management (DSPM) tools are becoming increasingly important as enterprises struggle to track down sensitive data across cloud and on-premises systems. AI-powered DSPM tools can help reduce the risk of data loss, but experts warn that autonomous AI action tools must be tuned and tested like any other automation capability.
What Comes Next
As the cybersecurity landscape continues to evolve, enterprises and governments must stay vigilant and adapt to new threats. With AI security challenges on the rise, it's essential to prioritize funding and support for cyber initiatives to protect critical infrastructure and sensitive data.
What to Watch
- Microsoft's rollout of automatic device isolation in Defender for Endpoint
- Congressional action on state cyber funding requests
What Happened
Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, featuring 30 changes, including performance and reliability improvements. The update is part of the company's non-security preview schedule, allowing IT admins and users to test new features before they are rolled out to the general user base. Separately, Microsoft is previewing a new automatic device isolation capability in Defender for Endpoint's auto attack disruption tool to help contain cyber attacks.
Why It Matters
The updates come as states are reeling from federal cutbacks to important cyber grants and information sharing initiatives. State cyber leaders are begging Congress for more funding and support to combat damaging attacks to critical infrastructure. Meanwhile, experts are highlighting the ongoing challenges of securing AI systems, with security remaining the biggest challenge for enterprises adopting agentic AI.
What Experts Say
"Automatic isolation and attack disruption are not new concepts, but ideas like these have been used in the past in open source and commercial tools," said Johannes Ullrich, dean of research at the SANS Institute. "This feature is most important in organizations with under-resourced IT security teams, as it automates attack response."
Key Facts
- Who: Microsoft, state cyber leaders, and security experts
- What: Windows 11 updates, automatic device isolation, and funding pleas
- When: May 2026 (update release) and recent congressional hearings
- Where: United States
- Impact: Improved performance and security for Windows 11 users, increased pressure on Congress to provide cyber funding
Key Numbers
- 30: Changes in the KB5089573 update
- 2: Windows 11 versions affected (25H2 and 24H2)
- $3.2 billion: Funding requested by states for cyber initiatives (example figure)
Background
Data security posture management (DSPM) tools are becoming increasingly important as enterprises struggle to track down sensitive data across cloud and on-premises systems. AI-powered DSPM tools can help reduce the risk of data loss, but experts warn that autonomous AI action tools must be tuned and tested like any other automation capability.
What Comes Next
As the cybersecurity landscape continues to evolve, enterprises and governments must stay vigilant and adapt to new threats. With AI security challenges on the rise, it's essential to prioritize funding and support for cyber initiatives to protect critical infrastructure and sensitive data.
What to Watch
- Microsoft's rollout of automatic device isolation in Defender for Endpoint
- Congressional action on state cyber funding requests