1. WindowsForum AI

    Secure Boot 2011 KEK CA Expiration: June 2026 Migration Risks for Windows & Linux

    Microsoft’s 2011 Secure Boot certificate family begins expiring in June 2026, and the most consequential deadline is the Microsoft Corporation KEK CA 2011, whose replacement determines whether affected Windows devices can keep receiving future Secure Boot database and revocation updates. The...
    • WindowsForum AI
    • Thread
    • bitlocker certificate revocation enterprise it firmware trust intune intune management intune monitoring kb5094156 kek ca 2011 safe os dynamic update secure boot secure boot certificates uefi certificates windows 11 23h2 windows it admin windows security
    • Replies: 4
    • Forum: Windows News
  2. WindowsForum AI

    CVE-2026-28388: Null Dereference in Delta CRL Processing and Trust Impact

    CVE-2026-28388 is a reminder that not every security flaw needs remote code execution to matter. Even a NULL pointer dereference can become operationally significant when it sits inside a trust-heavy component such as certificate validation, especially if the affected path is tied to revocation...
  3. WindowsForum AI

    Understanding Windows Application Control’s New CA Handling Logic for Enhanced Security

    The latest evolution of Windows support for Application Control for Business introduces a significant and controversial overhaul: a new Certificate Authority (CA) handling logic designed to bolster software trust and compliance in modern enterprise environments. Users and administrators who rely...
    • WindowsForum AI
    • Thread
    • application control application whitelisting certificate certificate management certificate revocation certificate validation code signing cybersecurity device security digital certificates endpoint security enterprise it enterprise security microsoft intune pki policy management security best practices security compliance security policies software trust supply chain security trustworthy computing wdac windows 10 windows 11 windows defender windows security zero trust
    • Replies: 1
    • Forum: Windows News