secure boot

Microsoft released Windows 10 KB5087544 on May 12, 2026, as the May Patch Tuesday cumulative security update for Windows 10 22H2 ESU systems, raising supported 22H2 machines to build 19045.7291 and adding new Secure Boot status reporting in the Windows Security app. The update is not a feature...

Microsoft disclosed CVE-2026-41097 on May 12, 2026, as an Important Secure Boot security feature bypass affecting supported Windows client and server releases, with required security updates available and Microsoft saying the issue is not publicly disclosed or exploited. The vulnerability is not...

Microsoft published KB5087594 on May 12, 2026 as a Safe OS Dynamic Update for Windows 11 version 23H2, tying another servicing package to the larger Secure Boot certificate rollover that begins affecting Windows devices in June 2026. The update itself is not a flashy feature release; it is...

Microsoft released KB5089593 on May 12, 2026, as a Safe OS Dynamic Update for Windows 11 versions 24H2 and 25H2, updating the Windows Recovery Environment while again warning that Secure Boot certificates used by most Windows devices begin expiring in June 2026. The smallness of the package is...

Microsoft released KB5089549 on May 12, 2026, as the monthly cumulative security update for Windows 11 versions 25H2 and 24H2, moving systems to OS builds 26200.8457 and 26100.8457 while bundling security fixes, servicing-stack changes, and selected reliability improvements. The update looks...

Microsoft released the May 12, 2026 Windows 11 security update KB5089549 for versions 25H2 and 24H2, moving supported systems to OS builds 26200.8457 and 26100.8457 while also publishing standalone catalog packages that require ordered MSU handling for manual deployment. The update is not just...

Microsoft is preparing Windows PCs for the first expiration of the original Secure Boot certificates issued in 2011, with the affected certificates beginning to age out in June 2026 and Windows Update now delivering replacement 2023-era trust material to supported devices. The visible symptom...

Microsoft’s Secure Boot certificate rollover is reaching ordinary Windows PCs in May 2026, with some devices getting a one-time extra restart as Windows Update installs replacement boot-trust certificates before the first 2011-era certificates begin expiring in June. The restart is the visible...

Microsoft’s Secure Boot certificate rollover begins in June 2026, just eight months after Windows 10 left mainstream support on October 14, 2025, and Google is using that timing to pitch ChromeOS Flex as a free way to keep older Windows PCs useful. The sales line is simple: if Windows 11 will...

Microsoft is preparing Windows PCs for a Secure Boot certificate rollover beginning in late June 2026, when original 2011-era certificates start expiring and unsupported Windows 10 systems outside Extended Security Updates will not receive the replacement certificates. This is not a theatrical...

Microsoft has confirmed that some Windows 11 PCs may restart more than once while installing recent and upcoming updates in spring 2026 because Windows is applying Secure Boot 2023 certificate changes before older 2011 certificates begin expiring in June 2026. That is the plain answer to the...

Windows users can check readiness for the June 2026 Secure Boot certificate expiration by running an elevated PowerShell command that looks for the Windows UEFI CA 2023 certificate, then using Windows Update, OEM firmware updates, or Microsoft’s documented registry-triggered update path if it is...

Microsoft’s original Secure Boot certificates, issued in 2011 and used by Windows PCs to trust bootloaders and firmware components before the operating system starts, begin expiring in June 2026, requiring updated 2023 certificates through Windows Update, enterprise policy, or OEM firmware. That...

Microsoft’s 2011-era Secure Boot certificates begin expiring in June 2026, forcing Windows PCs, servers, and some virtual machines to move to Microsoft’s newer 2023 certificate chain through Windows Update, OEM firmware updates, or managed IT deployment before boot-level protections start to...

Rufus 4.14, released as a final build on April 30, 2026, adds silent Windows installation, optional suppression of bundled Microsoft apps, Secure Boot policy handling, and several boot-media fixes for Windows 11 installers created on PCs. The update is more than another utility refresh; it is a...

Microsoft released KB5084812 on April 30, 2026, as a Safe OS Dynamic Update for Windows 11 versions 24H2 and 25H2, improving the Windows Recovery Environment while repeating an increasingly urgent warning that Secure Boot certificates used by most Windows devices begin expiring in June 2026. The...

Microsoft released KB5087583 on April 30, 2026, as a Setup Dynamic Update for Windows 11 versions 24H2 and 25H2, improving setup components while again warning that Secure Boot certificates on most Windows devices begin expiring in June 2026. The update itself is not dramatic; the timing is...

Microsoft has quietly given Windows administrators a badly needed diagnostic upgrade for the Secure Boot certificate transition: a new -Decoded parameter for the Get-SecureBootUEFI PowerShell cmdlet. Published under KB5093574 on April 28, 2026, the change turns Secure Boot’s normally opaque...

Microsoft’s new Secure Boot 2023 certificate assessment in Microsoft Defender arrives at a critical moment for Windows administrators: the original Secure Boot certificates issued in 2011 begin expiring in June 2026, with the transition stretching into the months that follow. The new Defender...

Microsoft’s April 2026 cumulative update for Windows 11 has landed with an uncomfortable reminder for administrators: encryption is only as smooth as the policies behind it. KB5083769, released for Windows 11 24H2 and 25H2, includes security improvements, Secure Boot-related work, Remote Desktop...