BIOS Archives

Winsage

June 21, 2026

Microsoft reveals how to verify Windows 11’s Secure Boot update, what to do if your PC missed it

The expiration of Microsoft's Secure Boot 2011 certificates on June 24 will not prevent older Windows PCs from booting, as confirmed by Microsoft. Devices will continue to operate normally, but they will miss future boot-level security updates, including updates to the Windows Boot Manager and mitigations for newly identified vulnerabilities. The ability to receive the Secure Boot 2023 update depends on the device firmware's compatibility, with many manufacturers, including Dell, HP, Lenovo, and ASUS, having cutoffs for BIOS updates based on the device's End of Service Life. Older PCs using Legacy BIOS or Compatibility Support Module (CSM) mode do not utilize UEFI Secure Boot, making the update irrelevant. Users running Windows 11 on unsupported hardware may have Secure Boot disabled or improperly configured. Without the 2023 certificates, devices cannot receive future revocation updates to the Secure Boot DBX, which lists compromised bootloaders. Users on Windows 10 with supported OEMs may receive the update if a compatible BIOS is available, while those on older PCs without updates can continue using their devices but will lack future security updates. The Secure Boot status can be checked through the Windows Security app, with color-coded badges indicating the status of the certificates.

AppWizard

June 19, 2026

Strengthening Teen Accounts with New Safety Updates on Instagram and Facebook

Meta has introduced a suite of updates to enhance the safety and wellbeing of teenagers on its platforms, including Instagram, Facebook, and Messenger. Key updates include: - A global rollout of 13+ content settings, which aims to ensure that teens encounter age-appropriate content by default. This includes obscuring inappropriate content and restricting engagement with unsuitable Profiles, Pages, Groups, and Events on Facebook and Messenger. - The development of AI-powered age assurance measures designed to identify underage accounts more effectively through visual analysis and contextual indicators, without using facial recognition. - Alerts for parents when their teenager searches for terms related to suicide or self-harm multiple times, part of broader parental supervision features currently available in the EU, Brazil, and India. - The introduction of the Family Center, a centralized hub for parents to manage their teen's online activities across multiple Meta platforms, allowing for oversight of digital interactions and access to a comprehensive overview of their teen's activity.

AppWizard

June 18, 2026

Meta expands teen safety measures across Instagram, Facebook and Messenger with new AI and parental controls

Meta has introduced a suite of safety enhancements for teenagers on Instagram, Facebook, and Messenger, including expanded age-appropriate experiences, AI-driven age assurance technologies, and new parental alerts. The updates include the global rollout of 13+ content settings for Teen Accounts, limiting exposure to inappropriate content and interactions on Facebook and Messenger. Enhanced AI-powered age assurance measures will better identify underage users, utilizing visual analysis capabilities to estimate age ranges without facial recognition. Instagram will notify parents if their teen frequently searches for terms related to suicide or self-harm. The Family Center will centralize parental supervision tools, providing broader visibility into teen activities across Meta’s platforms.

Winsage

June 17, 2026

Windows and Linux users: The deadline to update Secure Boot keys is near

In 2012, a novel bootkit targeting Mac OS X systems emerged, infiltrating the EFI firmware. A basic bootkit for Windows 8 also appeared, compromising the UEFI bootkit. By 2013, a more sophisticated UEFI bootkit named Dreamboat was introduced for Windows. The first documented real-world UEFI attack occurred in 2018 with the malware LoJax, linked to a Kremlin-backed hacking group. In 2020, the second known UEFI malware, MosaicRegressor, was discovered, which verified the presence of a malicious file upon each reboot. New UEFI bootkits like ESpecter, FinSpy, and MoonBounce have since emerged. In response to the threat of UEFI bootkits, Microsoft collaborated with manufacturers to implement Secure Boot, a protocol that uses cryptographic signatures to ensure the integrity of firmware during startup.

Winsage

June 16, 2026

Windows 11 update is breaking some PCs with boot and BitLocker issues

Windows 11 update KB5094126 (Build 26200.8655), released on June 9, 2026, has caused boot failures, blue screens, and BitLocker recovery prompts for users, particularly affecting business devices from HP and Dell, including models like HP EliteBook 840 G10 and Dell Precision 7530. The issues stem from changes in Secure Boot and EFI partition modifications, with insufficient EFI partition space leading to errors. A workaround involves disabling Secure Boot in BIOS. Additionally, users have reported disruptions with OneDrive and Microsoft Word integration, particularly in enterprise environments. Microsoft has not yet acknowledged these problems.

Winsage

June 15, 2026

Microsoft released the Windows 11 Secure Boot update for all PCs, how to verify yours

Microsoft has expanded the rollout of the Secure Boot 2023 certificate update to more Windows 11 and Windows 10 devices with the June 2026 Patch Tuesday update (KB5094126). This update aims to ensure that most supported consumer PCs are classified as high confidence, meaning necessary certificates are either installed or will be applied automatically. Secure Boot is a firmware security feature that verifies the software attempting to load during the startup process, blocking unauthorized software. The certificates supporting Secure Boot, issued in 2011, are expiring in stages starting June 24, 2026, prompting Microsoft to deploy replacement certificates. Most home users do not need to take manual action as the updates will occur automatically via Windows Update. Users can check their Secure Boot certificate status in the Windows Security app. A yellow warning indicates pending compatibility data, while a red alert suggests a firmware incompatibility requiring a BIOS update. Multiple reboots during the update process are normal, and a new SecureBoot folder in Windows is for staging cryptographic files. Older PCs may experience longer update times, and some may not receive updates due to firmware issues. HP users should check for BIOS updates if encountering BitLocker recovery loops. IT administrators should monitor device classifications and manually initiate updates for devices not in the high confidence category. Devices with Secure Boot disabled cannot receive updates, leaving them vulnerable. The expiration of the Microsoft Corporation KEK CA 2011 certificate on June 24 does not immediately affect device functionality, but it limits Microsoft's ability to sign new bootkit blacklist updates.

Winsage

June 14, 2026

Microsoft hides these secret Windows 11 performance boost settings available on every PC

Windows enthusiasts aim to enhance system performance while managing heat and power consumption, especially in mobile PCs. Under-volting techniques are commonly used to optimize performance and reduce power consumption, with tools like AMD's Ryzen Master and Intel's XTU available for this purpose. Users can also adjust settings in the BIOS, such as Curve Optimizer for Ryzen processors. Processor Power Management operates through the Advanced Configuration and Power Interface (ACPI), which includes P-states for voltage-frequency scaling and C-states for CPU sleep states. Windows provides two default P-States: "Minimum Processor State" and "Maximum Processor State." A Registry modification can unlock additional options under a "Processor performance boost mode" dropdown, allowing for five distinct profiles: 1. Disabled: Disables processor boosting, reducing power consumption and heat but limiting performance. 2. Enabled: Allows boost functionality under normal conditions, balancing performance with power and thermal constraints. 3. Aggressive: Prioritizes performance, allowing higher boost states but increasing power draw and thermal output. 4. Efficient Enabled: Focuses on energy efficiency while allowing boosting. 5. Efficient Aggressive: Balances performance responsiveness with efficiency. To enable the Processor performance boost mode, users must access the Registry Editor, navigate to a specific path, and modify the value of Attributes from 1 to 2. This will reveal the new "Processor performance boost mode" dropdown with the five P-State options. The settings are summarized as follows: - Disabled: P-state behavior is disabled. - Enabled: P-state behavior is enabled with Efficient Enabled CPPC. - Aggressive: P-state behavior is enabled with Aggressive CPPC. - Efficient Enabled: Efficient P-state behavior with Efficient Enabled CPPC. - Efficient Aggressive: Efficient P-state behavior with Aggressive CPPC. - Aggressive At Guaranteed: Requests performance above the guaranteed level. - Efficient Aggressive At Guaranteed: Consistently requests the highest performance above the guaranteed level. Users should be cautious when modifying these settings, as issues may arise that require reverting to original settings.

Winsage

June 14, 2026

Windows 11 KB5094126 crashes some PCs (HP?) with BSODs, breaks OneDrive in File Explorer, enterprise apps

Windows 11 KB5094126, released on June 9, 2026, is a significant update that introduces new features, including the Low Latency Profile, and addresses up to 200 security vulnerabilities. However, it has caused boot failures for some HP devices, particularly the HP EliteBook 840 G10, leading to BSODs or BitLocker Recovery prompts. The update may conflict with specific BIOS configurations or EFI/System partition settings, especially on devices with older EFI partitions. Users experiencing boot failures may need to disable Secure Boot as a temporary workaround. Additionally, the update has disrupted OneDrive integration in File Explorer, preventing access from the left pane and tray icon, although users can still access cloud folders directly. Similar issues have been reported with Dropbox and iCloud Drive. The update has also affected Microsoft Word integration in various business applications, leading to failures in document handling. Furthermore, changes to desktop.ini files have impacted custom folder icons, requiring users to unblock these files to restore functionality.

Winsage

June 9, 2026

Microsoft is usually blamed for every PC bug, but Dell and HP’s latest Windows 11 BSOD reboot fiascos are all on them.

Dell users reported issues with Dell SupportAssist causing system crashes, blue screens, and reboot loops on Windows 11. Dell stated the problems were not due to Microsoft's operating system and initially recommended uninstalling the software. An expert suggested disabling the service as an alternative. Dell later confirmed that Remediation Dell SupportAssist (version 5.5.16.0) and Alienware SupportAssist can trigger blue screen errors and reboot loops on Windows 11. HP also faced issues with a BIOS bug causing high-end Windows 11 PCs to get stuck in a BitLocker recovery loop, advising users to disable automatic updates while they worked on a fix.

Winsage

June 9, 2026

Dell, HP PCs ran into endless reboot, BitLocker recovery loops but Windows 11 isn’t to blame

Dell confirmed that a bug in version 5.5.16.0 of its SupportAssist Remediation software is causing blue screen errors and system restarts. The issue is linked to the SupportAssist Remediation service, which operates independently from the main SupportAssist application. Dell has released an updated version, 5.5.16.1, to fix the problem. Affected users should check for version 5.5.16.0 in the Installed Apps section of Windows Settings and update their SupportAssist OS Recovery Tools. Users are advised to back up data and keep their systems powered during the update process. HP is facing issues related to Windows Secure Boot updates, causing boot problems and BitLocker recovery loops on affected devices. This occurs when new UEFI Secure Boot CA 2023 certificates fail to apply correctly. HP recommends updating to the latest BIOS version and configuring Secure Boot certificates before installing Windows 11 Patch Tuesday updates. For systems already experiencing issues, BIOS configuration changes may be necessary.