firmware updates Archives

Winsage

June 27, 2026

Microsoft now lets you pause Windows updates indefinitely and cuts restarts down to one a month

The Windows team at Microsoft has introduced a calendar-based option for pausing updates, allowing users to select a specific end date for their pause, extending up to 35 days. Users can set this by navigating to Settings > Windows Update and choosing their end date from a calendar. The calendar pause is not permanent; once the pause period ends, Windows will automatically check for and install updates. Users can manually reset the pause to extend it further by another 35 days. Additionally, Microsoft is consolidating driver, .NET, and firmware updates into a single monthly restart to enhance user experience. The "Update and shut down" feature has been improved, allowing users to shut down their PCs without installing pending updates. The calendar pause feature is available in the June optional update KB5095093, while the other changes are accessible to Windows Insiders in the Experimental and Beta channels.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 23, 2026

In 2011, Microsoft signed the Secure Boot certificates that still sit inside millions of Windows PCs, and the first one expires on June 24, 2026, leaving unupdated machines running normally while future boot-level revocations stop reaching them

Microsoft's Secure Boot certificates, including the Microsoft Corporation KEK CA 2011, will expire on June 24, 2026, followed by the Microsoft UEFI CA 2011 on June 27 and the Microsoft Windows Production PCA 2011 on October 19. New certificates issued in 2023 will replace these older ones. While devices will continue to operate and receive standard Windows updates, they will gradually lose access to critical security updates that protect against boot-level threats. After June 24, the ability to sign new disallowed signature database payloads with the old KEK will be lost, reducing the capacity to revoke compromised bootloaders. Users are advised to keep Windows and firmware updates current, while enterprises may face challenges managing diverse machine inventories for updates.

Winsage

June 17, 2026

I dug through the Windows 11 Insider builds for June 2026 and found 7 features worth paying attention to

Microsoft rolled out several preview builds of Windows 11 in early June 2026 as part of the Windows Insider Program, focusing on refining existing functionalities rather than introducing many new features. A new Beta channel for version 26H1 was launched, featuring: - Screen Tint: An accessibility feature that provides a system-wide color overlay to reduce eye strain, accessible through Settings > Accessibility > Vision > Screen Tint, offering six preset colors or custom hues. - Low Latency Profile: Temporarily boosts processor frequency for 1 to 3 seconds during interactive tasks, improving application launch times by up to 40% and interaction times by as much as 70%, operating automatically without manual toggles. - Widgets Experience Update: Widgets now open without hover activation, Taskbar badges are off by default, and alerts are limited until user interaction. The dashboard displays Widgets under "widgets," and badging aligns with the system accent color. - Magnifier Enhancements: Users can input specific zoom percentages directly and access additional zoom presets ranging from 5% to 400%. - File Explorer Changes: Improvements for compatibility, performance, and reliability, including support for paths with double backslashes and quotation marks, and middle-click support for opening folders in new tabs. - Windows Update: Unification of drivers, .NET, and firmware updates with monthly quality updates, reducing required restarts to one per month. - Windows Search Enhancements: Improved handling of typos, missing letters, and partial app names, prioritizing accurate search results even with input errors.

Winsage

June 15, 2026

Microsoft released the Windows 11 Secure Boot update for all PCs, how to verify yours

Microsoft has expanded the rollout of the Secure Boot 2023 certificate update to more Windows 11 and Windows 10 devices with the June 2026 Patch Tuesday update (KB5094126). This update aims to ensure that most supported consumer PCs are classified as high confidence, meaning necessary certificates are either installed or will be applied automatically. Secure Boot is a firmware security feature that verifies the software attempting to load during the startup process, blocking unauthorized software. The certificates supporting Secure Boot, issued in 2011, are expiring in stages starting June 24, 2026, prompting Microsoft to deploy replacement certificates. Most home users do not need to take manual action as the updates will occur automatically via Windows Update. Users can check their Secure Boot certificate status in the Windows Security app. A yellow warning indicates pending compatibility data, while a red alert suggests a firmware incompatibility requiring a BIOS update. Multiple reboots during the update process are normal, and a new SecureBoot folder in Windows is for staging cryptographic files. Older PCs may experience longer update times, and some may not receive updates due to firmware issues. HP users should check for BIOS updates if encountering BitLocker recovery loops. IT administrators should monitor device classifications and manually initiate updates for devices not in the high confidence category. Devices with Secure Boot disabled cannot receive updates, leaving them vulnerable. The expiration of the Microsoft Corporation KEK CA 2011 certificate on June 24 does not immediately affect device functionality, but it limits Microsoft's ability to sign new bootkit blacklist updates.

Winsage

June 12, 2026

Microsoft Releases a Record Seven Windows 11 Insider Builds

Microsoft's Windows Insider program has released seven Insider builds across all Channels, including two builds on the Beta and Release Preview Channels and three builds for the new Experimental Channel. The updates focus on the Experimental (25H2), Beta (25H2), and Release Preview (25H2) Channels. The new 26H1 builds mainly feature elements from the 25H2 builds and are intended for new ARM-based PCs. Key features include: - A less disruptive Windows Update experience requiring only one monthly restart. - Improved Windows Search capabilities for better typo handling. - A new screen tint accessibility feature to reduce eye strain. - Quieter Widgets that do not open on hover and have a smaller memory footprint. - Magnifier tool enhancements with preset zoom increments and direct input options. - Bluetooth connectivity improvements for better compatibility with select devices. - Voice Access and Voice Typing now available in French, German, and Spanish. - Customizable right-click settings for touchpads. The Release Preview Channel is testing an optional update for Windows 11 versions 25H2 and 24H2, set for release in late June.

Winsage

June 8, 2026

Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days

The expiration date of the original Microsoft Secure Boot KEK certificate is June 24, 2026. Microsoft held a live "Ask Microsoft Anything" session on June 4 to address concerns regarding this deadline. The expiration affects the KEK key, while the DB key remains valid until October. After June 24, Microsoft will not be able to sign new DBX payloads, which are necessary for revoking compromised bootloaders. Devices without the new KEK may miss future revocations, leading to decreased security but will not stop booting immediately. The June Patch Tuesday update is expected to classify most systems as high confidence. IT administrators are advised to use the Intune monitoring report for device status and updates. Devices in a "temporarily paused" status require OEM firmware updates. Administrators should not delay manual rollouts for devices outside the high confidence classification. Secure Boot must be enabled to update certificates, and re-enabling it later can pose risks. Older models may receive high confidence classification faster than newer ones due to statistical requirements. In PXE boot environments, caution is needed when updating bootloaders. The Secure Boot update mechanism is consistent across Windows 10 and 11, and event logs are important diagnostic tools. Key event log entries include 1801, 1802, and 1803, which indicate various device statuses and issues. Microsoft provides resources at aka.ms/GetSecureBoot for further guidance.

Winsage

May 19, 2026

Introducing new Surface devices built for business and AI acceleration

IT leaders face challenges from the rise of artificial intelligence, sophisticated security threats, and scrutiny over investment decisions regarding PC fleets. Microsoft has introduced the Surface line to address these demands, integrating advanced silicon and software for enhanced security and AI capabilities. The new Surface Pro for Business and Surface Laptop for Business, powered by Intel Core Ultra Series 3 processors, offer significant performance improvements, including up to 35% better graphics than the MacBook Air with M5 and over 90% faster than the Laptop 5 on select configurations. The Surface Laptop for Business is available in 13-inch and 15-inch models, starting at 9.99, featuring a high-resolution touchscreen, advanced haptic touchpad, and up to 23 hours of battery life. The 13-inch Surface Pro for Business, also starting at 9.99, combines multiple input methods with on-device AI processing. All Surface devices are designed with security as a core principle, shipping as Secured-core PCs, and include an optional integrated privacy screen. They support AI applications both in the cloud and on-device, enhancing productivity. Devices can be managed through Microsoft Intune for operational efficiency. The new Surface devices are made from recycled materials, designed for energy efficiency, and certified by ENERGY STAR.

Winsage

May 17, 2026

Microsoft confirms Windows 11 KB5089549 issues due to low storage, says it’s rolling out an emergency patch to fix install errors

Microsoft has acknowledged an issue with the installation of Windows 11’s May 2026 Update (KB5089549), which has been encountering errors such as 0x800f0922, 0x80240069, and 0x80240031. An emergency server-side update is being implemented to resolve these installation hurdles. The KB5089549 update is mandatory and intended to install automatically on compatible PCs, but some users have reported difficulties, including installation stalling around 35-36%, leading to a rollback with a message stating, “something didn’t go as planned. Undoing changes.” Investigations reveal that installation failures are particularly affecting devices with limited EFI partition space, with error code 0x800f0922 indicating insufficient free space and potential conflicts with third-party files. The EFI System Partition (ESP) typically occupies no more than 100MB and can become congested due to leftover files, causing installation failures when available space is low. Users with less than 10MB of free EFI storage may face additional complications. A PowerShell command can be used to check EFI storage status. Microsoft has advised users to consider increasing the size of the ESP by modifying the Windows Registry, although the recent server-side update may have already addressed the issue. The Known Issue Rollback (KIR) has been implemented, automatically propagating the resolution to devices. Users are encouraged to restart their devices to expedite the application of the fix, and there are no additional bugs reported.

BetaBeacon

May 8, 2026

The Best Mobile Gaming Controllers for iPhone and Android (2026)

- The Backbone One is a mobile gaming controller that is easy to recommend and comfortable for long gaming sessions. - The Backbone Pro is an upgraded version of the Backbone One with additional features such as Bluetooth connectivity and programmable back buttons. - The ohsnap! Mcon Mobile Gaming Controller is a magnetic controller that attaches to the back of phones and has a unique design. - The GameSir G8 Galileo is a mobile gaming controller with a cradle style that holds smartphones and has Hall-effect sticks and triggers. - The Razer Kishi Ultra is a sliding controller designed for tablets and large phones with USB-C connectivity. - The 8Bitdo Pro 2 is a traditional mobile controller with a retro design, Hall-effect sticks, and customizable features. - The Gulikit KK3 Max is an upgraded version of the King Kong controller with Hall-effect joysticks and programmable buttons. - The Viture x 8Bitdo Ultimate Mobile Gaming Controller is designed for smart glasses and offers a comfortable gaming experience.