hotpatching Archives

Winsage

July 20, 2026

Microsoft rushes out Windows fix for Dell’s hot and bothered PCs

Microsoft has released an out-of-band update, KB5121767, to resolve an incompatibility issue affecting certain Dell models, allowing them to receive the July 2026 Windows security patch. This update targets the Intel Innovation Platform Framework drive, which caused performance, power consumption, and system behavior issues. It is applicable for Windows 11 versions 25H2 and 24H2. A separate hotpatch, KB5121768, is available for eligible Windows 11 Enterprise devices. Microsoft paused the Patch Tuesday rollout for the affected models to facilitate this update. The incompatibility was linked to the Intel driver and the Windows USB-C Connection Manager interface introduced in a June 23 preview update. Users experienced slowdowns, overheating, and unexpected shutdowns.

Winsage

July 18, 2026

Windows Server 2022 reach end of mainstream support in 90 days

Windows Server 2022 will end its mainstream support on October 13, 2026, transitioning to an extended support phase that will last until October 14, 2031, during which security updates will be provided at no additional cost. Windows Server 2022 was released in September 2021 and is part of the Long-Term Servicing Channel (LTSC) with a decade of support. Microsoft recommends upgrading to Windows Server 2025, which became generally available in November 2024 and will have mainstream support until November 13, 2029, and extended support until November 14, 2034. A 180-day trial for Windows Server 2025 is available through the Microsoft Evaluation Center. Additionally, hotpatching for Windows Server 2022 will be extended until October 2027 for Datacenter: Azure Edition systems, and the free Windows 10 Extended Security Updates program has been extended by one year. Windows 10 Enterprise LTSB 2016 and Windows 11 24H2 will stop receiving updates three months after their end of support.

Winsage

July 10, 2026

Microsoft explains the different types of Windows updates you get

Microsoft provides various types of Windows updates, including Patch Tuesday updates, which occur on the second Tuesday of each month. An example is the KB5094126 update for Windows 11, released on June 9, which includes both security and non-security content. IT administrators can use tools like Autopatch, Intune, and WSUS to deploy these updates. Hotpatching allows security updates to be applied without restarting devices. Optional non-security preview updates are released in the fourth week of each month for testing purposes and can be accessed by users on non-IT-managed devices. Out-of-band (OOB) updates can be issued at any time to address significant issues or vulnerabilities. Microsoft also enhances Windows 11 through annual updates, monthly updates, and Microsoft Store offerings, utilizing Controlled Feature Rollout (CFR) for feature deployment. Users are encouraged to keep their systems updated and can join the Windows Insider Program for early access to new features.

Winsage

July 9, 2026

Evolving Windows vulnerability management to meet the speed of AI-powered discovery

Microsoft is enhancing its security measures for Windows by integrating artificial intelligence (AI) to improve the discovery and analysis of vulnerabilities across its codebase. This includes the use of a multi-model agentic scanning harness (MDASH) that employs various AI models to identify and validate potential vulnerabilities efficiently. A dedicated cloud infrastructure supports this scanning process, which aims to minimize false positives and reduce the time from discovery to customer protection. The company collaborates across divisions to promote AI-powered tools and practices, refining its internal systems to integrate vulnerability discovery into development processes. This includes updating Secure Development Lifecycle (SDL) practices to address AI-enabled attack techniques. Customers can expect an increase in security updates as AI enhances vulnerability discovery capabilities. Windows updates undergo rigorous validation through programs like the Security Update Validation Program (SUVP) to ensure quality and compatibility. Microsoft also offers tools like Known Issue Rollback (KIR) for quick reversion of changes if issues arise during updates. Customers are encouraged to stay current with security updates and utilize resources like the Security Update Guide for prioritizing protections. To facilitate smoother update processes, Microsoft provides optional non-security preview releases for compatibility testing and employs modern management capabilities like Windows Autopatch to automate security updates. Azure Arc enables rebootless updates for Windows Servers, while Microsoft Defender and Intune help manage vulnerabilities and compliance across endpoints. Overall, Microsoft is committed to continuous improvement in its security practices to adapt to the evolving threat landscape and ensure customer protection through timely updates.

Winsage

July 9, 2026

Microsoft shares new Windows 11 Update install strategy every admin and user must know

Windows 10 and 11 updates can cause significant issues for users, including high disk space consumption, disruptions to desktop UI functionalities, and potential lockouts via BitLocker recovery. These problems often lead to delays in installing new patches by IT administrators and users, which can expose systems to vulnerabilities. Microsoft has raised concerns about this cautious approach, emphasizing that AI is changing the cybersecurity landscape by enabling faster identification and exploitation of vulnerabilities. To address this, Microsoft recommends moving away from broad deployment delays and adopting staged rollout strategies, using deployment rings to validate patches on a limited number of devices before wider distribution. Additionally, Microsoft has introduced technologies like Windows Autopatch and Hotpatching to automate and streamline the update process while maintaining security. The company advocates for expediting update validation to better protect systems in an evolving threat environment.

Winsage

June 29, 2026

Microsoft keeps Windows Server 2022 hotpatching alive into 2027

Microsoft has extended the availability of Windows Server 2022 hotpatching until 2027, specifically for the Windows Server 2022 Datacenter: Azure Edition. Mainstream support for Windows Server 2022 will end on October 13, 2026, while extended support will last until October 14, 2031. Hotpatching allows administrators to apply security updates without server downtime, although quarterly cumulative updates requiring a reboot will still occur. This feature is exclusive to Azure Edition users, with no similar support for on-premises users of Windows Server 2022. Additionally, hotpatch updates are being introduced for Windows 11 24H2 Enterprise clients and are now the default for Windows Autopatch.

Winsage

June 19, 2026

Windows Platform Security and the Race to Secure AI Agents

Microsoft has introduced the Microsoft Execution Containers (MXC) SDK to establish Windows as a reliable operating system for autonomous agents, focusing on containment, identity, and manageability. The MXC framework serves as a policy-driven execution layer for agents on Windows and Windows Subsystem for Linux (WSL), allowing developers to set access permissions using JSON or TypeScript. It employs process and session isolation for agent containment and identity. Future enhancements will include micro-VM support for high-risk tasks and integration with Windows 365 for cloud PC workloads. IT teams can manage MXC policies through Entra ID and Intune, while Defender and Purview provide protection and observability. The MXC framework is built on Microsoft's security initiatives, including Secure Boot and passwordless sign-in, allowing agents to inherit a secure foundation. However, early commentary expresses caution regarding MXC's perception as a comprehensive security solution, noting issues with overly permissive policies and the lack of outbound network filtering. Other platforms, such as Linux, are also enhancing security for agents with kernel-level isolation and secure environments like NVIDIA's OpenShell runtime. Various projects are focusing on agent sandboxes within Kubernetes, employing technologies like gVisor and Kata Containers for isolation. Overall, no singular dominant platform security model for AI agents has emerged, with Windows' MXC still considered nascent compared to existing solutions in Linux and Kubernetes ecosystems.

Winsage

May 6, 2026

Security updates Windows no longer require frequent reboots

Since early May 2026, a U.S. company has introduced Hotpatching technology for compatible devices, allowing security updates to be applied without a full system reboot. This technology replaces code fragments directly in the RAM of running processes, reducing the size of downloaded packages and enabling quicker implementation of critical patches. The update mechanism operates on a hybrid schedule with four base months requiring mandatory reboots for cumulative changes and eight hotpatching months focusing on in-memory security fixes. If extensive architectural changes are needed or if the software environment does not meet standards, the system defaults to a standard installation algorithm that requires a reboot. The technology is designed for corporate infrastructures with high operational demands and requires Windows 11 version 24H2 or later, specific editions, and enabled VBS virtualization protection.

Winsage

May 6, 2026

Microsoft enables Hotpatching by default: Windows updates without restarts become a reality

Beginning in May 2026, Microsoft will introduce Hotpatching as a default feature for compatible systems, allowing security updates to be applied without requiring a restart. Hotpatching updates code directly in the memory of running processes, enabling selective updates without interrupting the entire system. It does not replace monthly security updates but alters their activation process on eligible systems, categorized as security updates within the monthly B releases. Eligible systems must be running Windows 11 version 24H2 or newer and possess suitable licenses such as Enterprise, Education, Microsoft 365, or Windows 365. Management of these updates will be facilitated through Windows Autopatch or Microsoft Intune. Microsoft will continue to utilize baseline updates that require a restart, which will alternate with Hotpatch months. Hotpatching aims to reduce the frequency of restarts tied to security updates, particularly benefiting environments where uptime is critical. However, planned restarts will still be necessary, and robust telemetry and maintenance practices will be needed to ensure smooth operation.

Winsage

April 21, 2026

Planning your path to Windows Server 2025: What organizations are prioritizing in 2026 | Microsoft Windows Server Blog

Windows Server remains essential for critical workloads globally, with organizations needing to improve security, streamline patching, and maintain resilience in complex hybrid environments. The Windows Server Summit 2026 will take place from May 11–13, focusing on actionable guidance in security, patching, resiliency, and hybrid operations. Key areas of investment for 2026 include upgrade planning for Windows Server 2025, hybrid governance and management through Azure Arc, and operational consistency at scale with monitoring and patch automation. The Summit will provide insights into future Windows Server developments and facilitate direct interaction with Microsoft's product team. Attendees will receive practical guidance on upgrade strategies, operational patterns, security considerations, and hybrid management scenarios. Common triggers for evaluating changes include planning transitions to Windows Server 2025, reassessing patch cadence, standardizing hybrid operations, and addressing operational fragmentation. The event is aimed at enterprise IT professionals seeking to secure and modernize their Windows Server environments.