firmware update

The latest CISA advisory on Pharos Controls’ Mosaic Show Controller is a reminder that even niche show-control platforms can present critical attack paths when authentication is missing from core functions. CISA says Mosaic Show Controller firmware 2.15.3 is affected by CVE-2026-2417, a missing...

Microsoft quietly pushed a firmware update for the Surface Pro (11th Edition) this month that specifically targets a cluster of persistent inking, touchscreen, and Slim Pen 2 behaviors that have frustrated some early owners — and it arrives with the kind of mixed blessing firmware fixes always...

Microsoft has quietly shipped a firmware and driver package that finally stops some Surface Pro 11 for Business units from “inking while hovering,” fixes several pressure‑sensitivity regressions with the Surface Slim Pen 2, and addresses multiple touchscreen reliability problems that left owners...

Microsoft has quietly pushed a new set of firmware and driver packages for the Surface Pro (11th Edition) that target a cluster of long‑running input and media problems — most notably a suite of touchscreen and pen‑related fixes that aim to restore accurate touch, reliable pen inking, and...

Siemens ProductCERT has confirmed an improper access control vulnerability in Heliox-branded EV charging hardware that can let an attacker reach otherwise protected services by using the charging cable as an attack vector — Siemens has published fixes and recommends updating affected chargers to...

Microsoft has issued a platform-level warning: the Secure Boot certificates first issued around 2011 that underpin Windows’ pre-boot trust model begin expiring in June 2026, and although most updated systems will continue to boot, devices that do not receive the replacement certificate family...

Pelco’s Sarix Professional 3 Series cameras have a serious authentication-bypass weakness that, according to the advisory published this week, allows unauthenticated access to functionality normally gated behind the device’s web-management interface — including the ability to view live video...

Microsoft has issued a clear operational warning: the Secure Boot certificates that have anchored Windows’ pre‑boot trust since about 2011 are reaching the end of their planned lifetimes, and IT teams must act now to ensure fleets — especially servers, air‑gapped systems, and Windows 10 devices...

Microsoft has quietly begun a platform-level refresh of the cryptographic anchors that protect Windows’ pre‑boot environment, delivering new Secure Boot certificates through Windows Update and coordinated OEM firmware work to head off a calendar‑driven failure when Microsoft’s original UEFI...

Microsoft’s February firmware for the Surface Pro (11th Gen) is more than routine housekeeping: it plugs several high-impact holes that affected cellular connectivity, video conferencing, docking, and HDR playback — and it arrives at a moment when Microsoft is actively promoting 5G Windows...

Microsoft has issued a cumulative firmware and driver update for the Surface Pro (11th Edition) that addresses a cluster of high-impact issues — including loss of cellular connectivity when a VPN is active, unexpected shutdowns during Microsoft Teams calls, an eSIM configuration regression that...

Microsoft has begun rolling out a substantial firmware and driver update for the Surface Pro (11th Edition) that targets a string of practical, real-world pain points — from eSIM and VPN connectivity to Microsoft Teams stability and Dolby Vision playback — and delivers those fixes in a...

Windows 10 users who think “it still boots, so I’m fine” are being handed a quietly serious maintenance problem: Microsoft is replacing the Secure Boot certificates that have underpinned Windows’ pre‑boot trust model since 2011, and machines that don’t receive the new certificates will continue...

Microsoft’s latest Secure Boot certificate refresh has turned an already uncomfortable moment for Windows 10 holdouts into a ticking clock: machines that didn’t move to a supported Windows release by October 14, 2025 now face not only the end of monthly security fixes but also the prospect of...

Microsoft is using the regular Windows Update channel to rotate Secure Boot certificates on existing devices so that systems that rely on the original 2011 Microsoft Secure Boot certificates do not slip into a degraded security state when those certificates begin to expire between June and...

Microsoft and the PC industry have quietly opened a narrow but critical window to prevent a pre‑OS security gap this year: Windows will start rolling replacement Secure Boot certificates into device firmware via staged OS updates, while Microsoft is simultaneously intensifying its public push...

IT administrators now have practical, fleet-scale ways to check whether Windows devices are carrying the updated Secure Boot certificate chain and whether they’re ready to accept the upcoming Secure Boot updates — a crucial capability as Microsoft and OEMs rotate the platform’s cryptographic...

Windows 11’s recent update cycle has once again exposed how fragile the hardware–software handshake can be: multiple user reports and vendor advisories show that changes in Windows 11’s Host Memory Buffer (HMB) negotiation and related storage behavior in version 24H2 triggered system instability...

Rockwell Automation has confirmed a high‑severity denial‑of‑service vulnerability in the GuardLink EtherNet/IP interface on its 432ES‑IG3 Series A safety module (CVE‑2025‑9368), a flaw that can render the module unresponsive over the network and requires a manual power cycle to restore service —...