enrollment Archives

Winsage

August 13, 2026

Windows 10’s latest patch keeps your Secure Boot certificates on track

A recent update has been released, addressing security vulnerabilities and improving system functionality. Key improvements include a fix for the Backup feature, resolving an "invalid credentials" error that caused automatic backups to fail when using Server Message Block (SMB). The update also enhances the Secure Boot feature by introducing high-confidence device targeting data, allowing more devices to receive new Secure Boot certificates. This update addresses outdated Secure Boot certificates for Windows 11 and Windows 10 users. The update, identified as KB5120249, is under 1 GB and is available only to PCs enrolled in the Extended Security Updates (ESU) program, which ensures Windows 10 PCs receive security updates until at least October 2027. Non-enrolled PCs lost security update support in October 2025.

Winsage

August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.

BetaBeacon

August 11, 2026

Aptoide Games Joins Google Play: First Rival Android Store in Over Decade

The Play Catalog Access Program was implemented on July 22, 2026, as a result of a court order after Google lost a lawsuit filed by Epic Games for illegally monopolizing Android app distribution and in-app billing. The program allows enrolled stores, such as Aptoide Games, to access Google Play's app catalog and offer users the ability to install apps through Google Play's infrastructure, maintaining security and service fees.

Winsage

August 10, 2026

Azure Arc-Enabled ESUs for Windows Server 2016 Now Available

Microsoft is offering Extended Security Updates (ESUs) for Windows Server 2016, which will provide critical security patches until January 2030, after the end of extended support on January 12, 2027. Organizations can enroll their Windows Server 2016 instances via Azure Arc to receive these updates without migrating to Azure. The ESUs are available through a pay-as-you-go pricing model, allowing flexibility for on-premises servers and other cloud platforms. By using Azure Arc, organizations gain access to Azure management tools for improved visibility and compliance. IT administrators should connect eligible systems to Azure Arc to manage ESU enrollment and compliance effectively. ESUs are intended as a temporary solution while businesses modernize applications and plan migrations to supported platforms.

Winsage

August 10, 2026

Windows 11 is pulling picture passwords and pushing people to PINs, passwords, and biometrics

Microsoft has removed the option to set up a new picture password for Windows 11 users as part of the July 2026 security update. Users with an existing picture password can continue to use it, but once removed or disabled, it cannot be re-established. Microsoft recommends using Windows Hello PIN, facial recognition, or fingerprint recognition instead.

Winsage

July 31, 2026

Microsoft Ended Windows 10 Support, but You Don’t Necessarily Need a New PC

On October 14, 2025, Microsoft ceased support for Windows 10, which means it will no longer receive technical assistance, feature updates, or security patches. Microsoft has introduced the Extended Security Updates (ESU) program, which has been extended to October 2027, allowing users to continue receiving essential security updates if their device meets specific criteria. Eligibility for ESU includes running Windows 10, version 22H2 Home, Professional, Pro Education, or Workstations edition, having the latest Windows update installed, being signed in with an administrator Microsoft account, and enabling Windows Backup. ESU is free for users utilizing Windows Backup; otherwise, a one-time fee or redeeming 1,000 Microsoft Rewards points is required. For devices not qualifying for ESU, alternatives include installing third-party antivirus software, upgrading to Windows 11, or switching to Linux. To enroll in ESU, users can navigate to Settings > Update & Security > Windows Update, where an Enroll Now link will appear if eligible.

Winsage

July 30, 2026

Windows 11 KB5101684 update released with 42 changes and fixes

Microsoft has released the KB5101684 preview cumulative update for Windows 11 versions 24H2 and 25H2, which includes 42 bug fixes and various enhancements. This update is part of the optional non-security preview update schedule and does not include security updates. Users can install it via Settings > Windows Update > Check for Updates, with an option to choose installation. The update elevates Windows 11 24H2 to build 26100.8973 and Windows 11 25H2 to build 26200.8973. It addresses issues such as false invalid credential errors in File History backups, noncompliance in newly enrolled devices, and incorrect file markings on DFS mapped drives. New features include enhanced navigation in File Explorer, more accurate file size indicators, improved search results for app names, and new precision touchpad controls. Voice Isolation support for Voice Access is introduced, along with expanded Windows Hello Enhanced Sign-in Security for external fingerprint readers. Immediate features include enhancements to Secure Boot, app stability improvements, and fixes for MDM compliance issues. Additional features rolling out post-update involve better file size displays in File Explorer, enhanced app search, Voice Isolation for voice access, taskbar notification badge updates, new touchpad gesture controls, and reliability improvements for the Start menu and Windows sign-in screens. Microsoft reports no known issues with this update.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 20, 2026

Windows 11’s biggest updates may need multiple reboots, but that’s normal, don’t force shutdown

Users may experience double reboots when installing substantial Windows updates, such as the April and July 2026 Updates, due to factors like Secure Boot and .NET Framework updates. The July 2026 .NET Framework update specifically requires a separate reboot. Microsoft is still rolling out the Secure Boot 2023 certificate update, which may also lead to multiple reboots. Users are advised not to panic during these reboots and to allow the system time to complete the installation process. Additionally, Microsoft has warned against delaying updates for more than three days due to increasing update sizes related to security vulnerabilities. Some users may encounter SCEP certificate errors in the Event Viewer after the July 2026 Update, but these errors do not indicate a failure of the update process.