Defensive Security & Blue Team BleepingComputer 1 month ago

Microsoft fixes bug that wiped Windows desktop settings

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: MEDIUM
Impacted Surface
Client Endpoints & Operating Systems
Intelligence Sector
Defensive Security & Blue Team

Analyst Takeaway

"Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices. The company confirmed last week, after a wave of user reports that their wallpaper switched to a black background automatically, that this bug is triggered after installing the KB5120998 August 2026 preview update on Windows 11 24H2 and Windows 11 25H2..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

Windows

Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices.

The company confirmed last week, after a wave of user reports that their wallpaper switched to a black background automatically, that this bug is triggered after installing the KB5120998 August 2026 preview update on Windows 11 24H2 and Windows 11 25H2 systems.

"Following installation of Windows updates released August 27 2026 (KB5120998) and later, some Windows Desktop settings fail to load, resulting in desktop backgrounds displaying as a solid black color," Microsoft said in a Windows release health update.

"On affected devices, attempting to manually restore customized settings does not work. This is because the issue prevents the correct loading of settings, regardless of their value. In this case, a default black background is used instead."

The KB5120998 preview update causing this issue also changes or resets mouse settings, making it impossible to restore the previous settings after they are reverted.

Get the report

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →