HomeIntelligenceBrief
BREACH BRIEF 🟢 Low Advisory

Windows 11 KB5120998 Update Resets Mouse Cursor Settings, Preventing Restoration

Microsoft’s August 2026 KB5120998 preview update for Windows 11 reverts custom mouse cursor settings to defaults, and users cannot restore them. The incident highlights the importance of continuous configuration‑baseline monitoring for audit‑ready change management.

Verisq™ Intelligence · 📅 August 31, 2026 · 📰 bleepingcomputer.com
🟢
Severity
Low
AD
Type
Advisory
🎯
Confidence
High
🏢
Affected
1 sector(s)
Actions
3 recommended
📰
Source
bleepingcomputer.com

Windows 11 KB5120998 Update Resets Mouse Cursor Settings, Preventing Restoration

What Happened — Microsoft’s August 2026 non‑security preview update KB5120998 for Windows 11 (versions 24H2/25H2) has been reported to automatically revert custom mouse cursor settings to default values. Users cannot restore their prior personalization after the update installs.

Why It Matters for Trust & Control Assurance

  • Uncontrolled configuration drift after a routine OS update illustrates the need for continuous configuration‑baseline monitoring.
  • Documenting the update‑induced change and evidencing remediation supports a defensible audit trail for change‑management controls.
  • The scenario maps directly to the control objective of configuration management and change control, a single VCF objective that satisfies many frameworks (e.g., NIST CSF, ISO 27001).

Who Is Affected – Enterprises and end‑users across all sectors that run Windows 11 on desktops or laptops.

Recommended Actions

  • Deploy the update first in a test environment to verify that existing configuration baselines remain intact.
  • Capture pre‑ and post‑update configuration snapshots (e.g., mouse cursor registry keys) as evidence of control compliance.
  • If regression occurs, use Group Policy or endpoint‑management tools to re‑apply the desired settings and document the remediation steps.
  • Log the incident in your change‑management system and track remediation as a control‑effectiveness metric.

Source: BleepingComputer

Technical Notes – The issue is limited to UI personalization (cursor size, animation, high‑DPI assets). No security‑related CVE is associated; the update is optional and non‑security‑focused. Microsoft is investigating the root cause and has asked affected users to submit feedback via the Feedback Hub.

📰 Original Source
https://www.bleepingcomputer.com/news/security/microsoft-says-windows-11-kb5120998-update-resets-mouse-settings/

This Verisq Intelligence Brief is an independent analysis. Read the original reporting at the link above.

Third-party risk

Does this breach reach you?

Verisq continuously monitors your vendors for breach and ransomware activity, so the question stops being whether it happened and becomes whether it reaches you.

See a live Trust Center →