February 2026 Patch Tuesday restricts Windows credential autofill to fix a Windows Hello input injection flaw (CVE-2026-20804).
Windows 11's next act? Lock it down by default and make every app ask nicely first, tightening control, boosting transparency, and curbing unwanted changes.