Blue Screen of Death Archives

Winsage

July 10, 2026

Microsoft’s new Windows 11 recovery tool is the ultimate Undo button

On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.

Tech Optimizer

July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.

Winsage

July 3, 2026

Intel’s major driver update for Windows 11 delivers performance boost, ships with Microsoft’s quality promise

Microsoft's Driver Quality Initiative (DQI) aims to enhance driver stability and predictability for Windows 11, with Intel recently releasing Bluetooth and Wi-Fi driver updates (version 24.50.0) that align with this initiative. The DQI, discussed at the Windows Hardware Engineering Conference (WinHEC) in May 2026, involves collaboration with major tech companies like Intel, AMD, and Qualcomm to improve driver reliability. Microsoft has mandated OEMs to follow strict security policies and adopt Microsoft-authored class drivers to reduce kernel interference and enhance performance and security. The initiative includes quality benchmarks focused on stability, functionality, performance, and reduced power impact. Intel is the first to adopt these changes, with AMD also committing to high-quality driver collaboration.

Winsage

June 19, 2026

Microsoft confirms Recycle Bin bug across all versions of Windows

Reports have emerged about complications from the latest Patch Tuesday update, affecting users with issues such as access problems with OneDrive and Dropbox, BitLocker recovery lockouts, and Blue Screen of Death (BSOD) errors. Microsoft has acknowledged a glitch related to the Recycle Bin after the installation of June's Patch Tuesday update (KB5094126), where the confirmation dialog displays the internal file name instead of the actual name when deleting an item. This issue affects various supported Windows client and server versions, including Windows 11 (versions 26H1, 25H2, 24H2, 23H2), Windows 10 (versions 22H2, Enterprise LTSC 2021, Enterprise LTSC 2019, Enterprise LTSB 2016), and Windows Server (2025, 2022, 2019, 2016, 2012 R2, 2012). Microsoft is working on a solution expected in a future update, but it is unclear if it will be part of the next Patch Tuesday or an out-of-band update. Commercial customers can implement a workaround by contacting Microsoft Support for Business.

Winsage

June 14, 2026

Windows 11 KB5094126 crashes some PCs (HP?) with BSODs, breaks OneDrive in File Explorer, enterprise apps

Windows 11 KB5094126, released on June 9, 2026, is a significant update that introduces new features, including the Low Latency Profile, and addresses up to 200 security vulnerabilities. However, it has caused boot failures for some HP devices, particularly the HP EliteBook 840 G10, leading to BSODs or BitLocker Recovery prompts. The update may conflict with specific BIOS configurations or EFI/System partition settings, especially on devices with older EFI partitions. Users experiencing boot failures may need to disable Secure Boot as a temporary workaround. Additionally, the update has disrupted OneDrive integration in File Explorer, preventing access from the left pane and tray icon, although users can still access cloud folders directly. Similar issues have been reported with Dropbox and iCloud Drive. The update has also affected Microsoft Word integration in various business applications, leading to failures in document handling. Furthermore, changes to desktop.ini files have impacted custom folder icons, requiring users to unblock these files to restore functionality.

Winsage

June 12, 2026

Windows bowls a BSOD at sports fans

Worcestershire County Cricket Club experienced a Blue Screen of Death (BSOD) on its screens, which are typically used to relay messages to spectators. The BSOD was caused by a DRIVERPOWERSTATE_FAILURE, likely due to a hardware issue or a malfunctioning driver. This incident has drawn attention from system administrators and has been noted by a reader named Rhodri Howell.

Winsage

May 26, 2026

A recent HP laptop BIOS bug is leaving high-end Windows 11 PCs stuck in an endless BitLocker recovery loop

HP laptop owners, especially those with EliteBooks, ProBooks, and ZBook workstations, are experiencing issues after a recent BIOS firmware update via Windows Update, leading to system freezes and Blue Screen of Death errors. HP has acknowledged the problem and is investigating it, noting that Microsoft’s 2023 certificates may not apply correctly during this issue. Users are advised to check the UEFICA2023Status and UEFICA2023Error registry values to assess the update process. If the UEFICA2023Status is "In Progress" for too long and UEFICA2023Error is greater than 0, the update has failed. HP recommends disabling automatic updates to avoid the problematic BIOS update and has provided a manual workaround for the BitLocker Recovery loop. Users can also revert to a stable BIOS version, though this may be challenging and may require specific hardware.

Winsage

May 23, 2026

Microsoft says you should pause Windows 11 Updates when you need to work, as it tests greater controller

Microsoft is shifting its approach to Windows updates, responding to user frustrations about receiving update notifications during critical work hours. The company is currently testing more nuanced controls for updates with Windows Insiders, including a "Pick a date" feature that allows users to pause updates for up to 35 days, with the option to extend the pause indefinitely. Retail Windows 11 users can pause updates for up to five weeks, after which updates will automatically download without further pause options. Microsoft acknowledges that the frequency of updates can disrupt workflows for its 1.6 billion users, many of whom view mandatory updates as interruptions. The time required for updates has increased due to larger cumulative update packages, which can exceed 4GB, and the complexity of the operating system. To improve user control, Microsoft is testing a new power menu that separates update and shutdown options, allowing users to power down without installing updates. Additionally, updates will now include device class information in their titles for better user awareness. These changes aim to streamline the update experience and address long-standing user complaints.

Winsage

May 19, 2026

Microsoft plans to improve Windows 11 driver quality in 2026

Microsoft is launching the Driver Quality Initiative (DQI) to improve the quality of Windows 11 drivers, which are crucial for the operating system's performance. The initiative includes four pillars: encouraging the use of safer user-mode drivers, implementing rigorous partner verification processes, enhancing the Windows Update catalog, and focusing on stability and performance. Microsoft plans to collaborate with partners like AMD and Intel to achieve these goals. AMD's Director of Software Engineering emphasized that driver quality is a shared commitment. Additionally, Microsoft aims to enhance Windows 11 by reintroducing features like a movable taskbar and improving performance for lower memory devices, with gradual improvements expected in the coming months.

Winsage

May 13, 2026

Windows Update is getting better at saving your PC from buggy drivers

Microsoft has introduced Cloud-Initiated Driver Recovery, a feature that allows the company to replace problematic drivers on affected devices directly from the cloud, without requiring manual intervention from users or hardware partners. This aims to enhance system reliability and performance while reducing user burden in managing driver issues.