firmware Archives

Winsage

July 9, 2026

Evolving Windows vulnerability management to meet the speed of AI-powered discovery

Microsoft is enhancing its security measures for Windows by integrating artificial intelligence (AI) to improve the discovery and analysis of vulnerabilities across its codebase. This includes the use of a multi-model agentic scanning harness (MDASH) that employs various AI models to identify and validate potential vulnerabilities efficiently. A dedicated cloud infrastructure supports this scanning process, which aims to minimize false positives and reduce the time from discovery to customer protection. The company collaborates across divisions to promote AI-powered tools and practices, refining its internal systems to integrate vulnerability discovery into development processes. This includes updating Secure Development Lifecycle (SDL) practices to address AI-enabled attack techniques. Customers can expect an increase in security updates as AI enhances vulnerability discovery capabilities. Windows updates undergo rigorous validation through programs like the Security Update Validation Program (SUVP) to ensure quality and compatibility. Microsoft also offers tools like Known Issue Rollback (KIR) for quick reversion of changes if issues arise during updates. Customers are encouraged to stay current with security updates and utilize resources like the Security Update Guide for prioritizing protections. To facilitate smoother update processes, Microsoft provides optional non-security preview releases for compatibility testing and employs modern management capabilities like Windows Autopatch to automate security updates. Azure Arc enables rebootless updates for Windows Servers, while Microsoft Defender and Intune help manage vulnerabilities and compliance across endpoints. Overall, Microsoft is committed to continuous improvement in its security practices to adapt to the evolving threat landscape and ensure customer protection through timely updates.

AppWizard

July 8, 2026

Wear OS 7: New features, eligible smartwatches, and everything you need to know

Wear OS 7 has been rolled out for smartwatches currently operating on Wear OS 6, with future models like the Galaxy Watch 9 expected to come with this update pre-installed. Current devices eligible for the upgrade include the Galaxy Watch 8 series and the OnePlus Watch 3 (release date pending). Key features of Wear OS 7 include Live Updates for real-time notifications, Remote Media Routing and Per-App Auto Launch for media apps, and Android XR Control for managing Android XR devices. The update introduces a new Neural Expressive design language, Gemini Intelligence for task automation, and a Personal Intelligence feature for personalized suggestions based on app data. Customization is enhanced with Widgets replacing traditional tiles, allowing users to create dynamic dashboards. Updates to the Google Contacts app include an improved search interface and an Emergency Sharing feature for location sharing during emergencies. The Wear Workout Tracker standardizes fitness tracking across devices, and battery life improvements promise up to a 10% increase in longevity. Samsung's One UI Watch is evolving with the upcoming One UI 9 Watch, which is expected to feature a refreshed interface and new customizations. Firmware for One UI 9 Watch has been detected on Galaxy Watch 8 models, indicating an imminent release, with the Galaxy Watch 9 series anticipated to launch in July alongside the Galaxy Z Fold 8.

Winsage

July 4, 2026

I found a hidden way to limit RAM on Windows 11, and the results were way more surprising than I expected

Windows 11 allows users to limit RAM usage through the System Configuration tool (msconfig) for testing and troubleshooting purposes. Users can specify the maximum memory in megabytes, but there is no simple option to set a fixed amount like "4GB of RAM." Limiting RAM can degrade performance and may cause applications to become sluggish. To limit RAM, users must navigate to the Boot tab in msconfig, check the Maximum memory option, and enter the desired amount. To restore full RAM access, users need to uncheck the Maximum memory option in the same tool. On some modern systems with UEFI firmware and Secure Boot enabled, the Maximum memory setting may not be accessible, and disabling Secure Boot may be necessary to apply the limit. Disabling Secure Boot can reduce security against boot-level malware.

Winsage

July 4, 2026

How to Enable Windows 11 CPU Boost

Modern processors can automatically adjust their clock speeds based on demand. Windows 11 includes a feature called CPU boost that allows users to manage CPU performance responsiveness, balancing power efficiency and performance. CPU boost modifies how often Windows prompts the CPU to enter boosted states without changing the maximum turbo speed or hardware limitations. Users can select aggressive settings for improved responsiveness or less aggressive modes for reduced heat and power consumption. To enable CPU boost, users can either modify the Registry Editor or use a command in the Command Prompt. Once enabled, users can configure their preferences in the Control Panel under Power Options. Available boost mode settings include Disabled, Enabled, Aggressive, Efficient Enabled, and Efficient Aggressive, with options varying by CPU model and Windows version. Monitoring performance and system metrics after selecting a mode is recommended.

Winsage

June 29, 2026

OEMs reveal Windows 11 Secure Boot fix after deadline passes, here’s how to update your PC

Major PC manufacturers, including HP, Dell, ASUS, Lenovo, MSI, Acer, Samsung, LG, and Microsoft’s Surface division, have provided guidance on transitioning to new Secure Boot certificates as the expiration of Microsoft’s 2011 certificates approaches. The expiration will occur in three phases: Microsoft Corporation KEK CA 2011 expired on June 24, 2026; Microsoft UEFI CA 2011 expired on June 27, 2026; and Microsoft Windows Production PCA 2011 is set to expire on October 19, 2026. Microsoft has begun rolling out replacement certificates through Windows Update, contingent on OEMs providing compatible BIOS updates. ASUS offers detailed documentation for both consumer and commercial devices, confirming that most users will receive updates automatically. Lenovo provides direct download links for BIOS updates organized by product family and specifies which products will not receive updates. Dell's support article covers its entire product lineup, noting that devices with an End of Service Life before January 1, 2026, will not receive updates. HP outlines a dual-track approach for updates, with specific timelines for commercial PCs. Microsoft's Surface devices receive updates directly from Microsoft, while MSI categorizes guidance based on processor generation for its laptops. Acer emphasizes backing up the BitLocker recovery key and provides a model table for confirmed BIOS release dates. Samsung confirms that all PCs running Windows 10 or 11 will function normally post-expiration, but security updates will cease. LG has released a guide for checking BIOS updates for its PCs. To verify if a PC has the 2023 certificates, users can check the Secure Boot section in Windows Security. A green checkmark indicates successful application, while yellow or red icons indicate pending updates or incompatibility. Microsoft has pushed the certificates to all eligible devices as of June 2026.

AppWizard

June 29, 2026

XBOX PC and Games

The PC is a popular platform for gamers, and Windows 11 enhances this experience with features tailored for gaming. It includes an integrated Xbox app that connects with third-party game stores and Microsoft's gaming ecosystem. The Game Bar allows users to capture screenshots, record video clips, and interact with friends on Xbox Live. Xbox Mode optimizes resource usage for gaming but is not enabled by default. Windows 11 comes with pre-installed gaming features, including the Xbox app and Game Bar, which can be customized through the Settings app. Users can configure display settings, connect an Xbox Wireless Controller, and customize the Game Bar and its widgets. The Xbox app allows users to manage their game libraries, access Game Pass subscriptions, and stream games via Cloud Gaming. Microsoft offers various Xbox Game Pass subscription tiers for access to a library of games. Xbox Mode provides a full-screen, controller-optimized interface that enhances gaming performance.

Winsage

June 27, 2026

Microsoft now lets you pause Windows updates indefinitely and cuts restarts down to one a month

The Windows team at Microsoft has introduced a calendar-based option for pausing updates, allowing users to select a specific end date for their pause, extending up to 35 days. Users can set this by navigating to Settings > Windows Update and choosing their end date from a calendar. The calendar pause is not permanent; once the pause period ends, Windows will automatically check for and install updates. Users can manually reset the pause to extend it further by another 35 days. Additionally, Microsoft is consolidating driver, .NET, and firmware updates into a single monthly restart to enhance user experience. The "Update and shut down" feature has been improved, allowing users to shut down their PCs without installing pending updates. The calendar pause feature is available in the June optional update KB5095093, while the other changes are accessible to Windows Insiders in the Experimental and Beta channels.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 23, 2026

In 2011, Microsoft signed the Secure Boot certificates that still sit inside millions of Windows PCs, and the first one expires on June 24, 2026, leaving unupdated machines running normally while future boot-level revocations stop reaching them

Microsoft's Secure Boot certificates, including the Microsoft Corporation KEK CA 2011, will expire on June 24, 2026, followed by the Microsoft UEFI CA 2011 on June 27 and the Microsoft Windows Production PCA 2011 on October 19. New certificates issued in 2023 will replace these older ones. While devices will continue to operate and receive standard Windows updates, they will gradually lose access to critical security updates that protect against boot-level threats. After June 24, the ability to sign new disallowed signature database payloads with the old KEK will be lost, reducing the capacity to revoke compromised bootloaders. Users are advised to keep Windows and firmware updates current, while enterprises may face challenges managing diverse machine inventories for updates.