HomeIntelligenceBrief
BREACH BRIEF 🟡 Medium Advisory

Microsoft KB5120998 Update Resets Desktop and Mouse Settings on Windows 11 24H2/25H2 Devices

A preview Windows 11 update (KB5120998) corrupts wallpaper, theme, and mouse settings on 24H2/25H2 builds, forcing a default black background that cannot be restored. The incident underscores the need for robust change‑control evidence in audit‑ready environments.

Verisq™ Intelligence · 📅 September 03, 2026 · 📰 bleepingcomputer.com
🟡
Severity
Medium
AD
Type
Advisory
🎯
Confidence
High
🏢
Affected
1 sector(s)
Actions
3 recommended
📰
Source
bleepingcomputer.com

Microsoft KB5120998 Update Resets Desktop and Mouse Settings on Windows 11 24H2/25H2 Devices

What Happened – Microsoft confirmed that the optional preview update KB5120998 (released 27 August 2026) can corrupt desktop configuration on Windows 11 24H2 and 25H2. Affected devices lose wallpaper, theme, and mouse settings, and the OS will revert to a default black background that cannot be manually restored.

Why It Matters for Trust & Control Assurance

  • The incident illustrates a classic change‑management gap: an untested update altered baseline configurations, breaking a core user‑experience control that many organizations rely on for audit‑ready desktop baselines.
  • Continuous control‑assurance programs that capture configuration snapshots before and after patch deployment can provide the evidence needed to demonstrate that change‑control policies are being followed and to quickly roll back unintended changes.

Who Is Affected – Enterprises across all sectors that standardize Windows 11 24H2/25H2 desktops (technology, finance, healthcare, government, etc.).

Recommended Actions

  • Deploy the update first in a controlled test environment; verify that desktop and peripheral settings remain intact.
  • Capture baseline configuration evidence (registry, GPO, user profile settings) before applying the patch and compare post‑update snapshots.
  • If the bug is reproduced, use Microsoft’s rollback guidance or defer the update until a fix is released.
  • Document the incident and the remediation steps in your change‑management log to maintain a defensible audit trail.

Technical Notes – The issue is triggered by the KB5120998 preview update, which includes start‑menu, task‑bar, and search improvements. The bug affects wallpaper, theme, slideshow, contrast settings, and mouse configuration. It is not a security vulnerability; it is a functional regression in the update package. Source: BleepingComputer

📰 Original Source
https://www.bleepingcomputer.com/news/microsoft/microsoft-says-kb5120998-windows-update-resets-desktop-settings/

This Verisq Intelligence Brief is an independent analysis. Read the original reporting at the link above.

Third-party risk

Does this breach reach you?

Verisq continuously monitors your vendors for breach and ransomware activity, so the question stops being whether it happened and becomes whether it reaches you.

See a live Trust Center →