quality updates Archives

Winsage

July 14, 2026

Microsoft says stop waiting to install Windows updates. Here’s why

Microsoft has revised its guidance on Windows updates, urging users to install them within three days due to the rise of AI-driven cyber threats. Jeremy Chapman from Microsoft 365 emphasized the need for timely updates, recommending a maximum deferral period of two days for quality updates. In June, Microsoft patched 206 vulnerabilities, highlighting the importance of these updates to avoid significant risks. AI can help attackers exploit vulnerabilities quickly, making the practice of delaying updates obsolete. Microsoft has also developed an AI tool, MDASH, to identify vulnerabilities in Windows code.

Winsage

July 11, 2026

AI Threat Forces Microsoft To Update Windows Patch Guidance

Microsoft is advocating for a reevaluation of Windows patch management practices due to the rapid evolution of artificial intelligence (AI) impacting cybersecurity. The company emphasizes that traditional timelines for patch deployment, typically spanning several weeks after the monthly Patch Tuesday, are inadequate against modern cyber threats. Microsoft recommends organizations shorten deployment windows to under three days for quality updates, with immediate installation deadlines and minimal user grace periods. To support these changes, Microsoft is enhancing Windows Autopatch with a new reporting dashboard for patch compliance and security insights. The company is promoting cloud-managed deployment through Microsoft Intune and Windows Autopatch while continuing to support legacy tools. Additionally, Microsoft is introducing Windows Hotpatch technology, allowing security updates to be installed without immediate reboots, and advocating for the use of identity-based access controls to isolate unpatched devices. The guidance reflects a shift from scheduled patching to continuous risk management, encouraging organizations to prioritize high-risk assets and automate update deployments. Microsoft is also investing in AI-assisted vulnerability discovery and automated code analysis to improve defensive capabilities. The overarching message is that enterprises must adapt their update strategies to address the accelerated pace of AI-driven exploitation.

Winsage

July 10, 2026

Microsoft is rewriting Windows patch guidance because of AI

Microsoft advises organizations to expedite their Windows update deployment timelines due to advancements in artificial intelligence that allow cyber attackers to quickly exploit vulnerabilities after security updates are released. Jeremy Chapman, Director of Microsoft 365, warns that delaying critical quality updates with security fixes increases the risk of exploitation. Microsoft recommends a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. The Windows Autopatch report within Microsoft Intune helps identify unpatched devices, allowing administrators to adjust update deferral policies. Organizations can configure update delivery settings through policy controls in Windows Autopatch and Microsoft Intune, as well as other management tools like Microsoft Configuration Manager and Windows Server Update Services. Microsoft also promotes the use of Hotpatch for quicker installation of security updates without rebooting and encourages Conditional Access policies to restrict access to corporate resources for devices that lack required updates.

Winsage

July 10, 2026

Microsoft confirms Secure Boot update failing on some Windows 11 PCs, promises a resolution

Microsoft has acknowledged that some Windows 11 PCs are facing issues with Secure Boot certificate updates, which may fail to install or be blocked. The company is working with PC manufacturers to develop a patch, while users may need to take proactive measures if their certificates are obstructed. Microsoft has temporarily halted the rollout of Secure Boot for certain devices due to complications, and affected users will receive detailed error messages in the Windows Security app regarding their Secure Boot certificates. Secure Boot certificates issued in 2011 have expired, and Microsoft is replacing them with new certificates issued in 2023. Most modern hardware is already utilizing the new certificates, but some devices may have disabled Secure Boot or faulty firmware. Users can check their Secure Boot status in the Windows Security app. HP has confirmed that Secure Boot updates are being blocked on some of its PCs due to a BitLocker issue, which prevents the installation of new certificates. Microsoft has paused Secure Boot certificate updates for devices affected by known issues while collaborating with manufacturers to identify specific devices or firmware complications. A firmware update will be necessary for affected devices, but it is not yet available. The majority of PCs have received the Secure Boot certificates via Windows Update, but compatibility issues may prevent some devices from receiving the update. Older devices or those not among the OEM’s top-selling models may not receive updates if the UEFI firmware is unsupported. Secure Boot is a security feature required for Windows 11, preventing unauthorized software from executing at boot. While an expired Secure Boot certificate does not stop a PC from functioning, it may limit long-term security protection. Microsoft advises users not to disable Secure Boot, as it would compromise security further.

Winsage

July 10, 2026

Microsoft Urges Faster Windows Updates as AI Accelerates Attacks

The intersection of artificial intelligence and cybercrime poses significant challenges for organizations, as cybercriminals can quickly exploit vulnerabilities. Microsoft suggests that traditional patching methods are inadequate, urging organizations to adopt a more agile approach to patch management with rapid update deployment. They recommend reducing the time between the release of security updates and their deployment to less than three days, with deadlines for updates set to zero or one day and a maximum grace period of two days. Additionally, Microsoft advocates for a phased deployment strategy, testing updates on select devices before wider rollout, and utilizing features like Hotpatch and Conditional Access policies to enhance security and expedite update processes.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 23, 2026

Microsoft Confirms Windows 11 26H2 Update for x86-64 PCs

Microsoft has confirmed the release of the Windows 11 update version 26H2, designed for PCs with x86-64 processors from Intel and AMD. Devices with Qualcomm Snapdragon Elite and NVIDIA RTX Spark processors will receive a separate update. Earlier this year, Windows 11 26H1 was introduced for Windows-on-Arm devices. Windows 11 26H2 is a minor update that shares the same code base as version 25H2, allowing for a seamless transition without a complete system file replacement. The update process is straightforward and will consolidate security and quality updates. Microsoft will provide security updates for Windows 11 versions 24H2, 25H2, and 26H2 for two years. Windows 11 Enterprise LTSC editions will offer stability by locking onto a specific kernel code base for security updates until a future date.

Winsage

June 22, 2026

Windows 11 26H2 arrives as a tiny unlock, not a massive download

Microsoft has confirmed the release of Windows 11 26H2, scheduled for Fall 2026. This update focuses on improving the update experience for businesses and IT professionals by streamlining maintenance processes. Windows 11 26H2 will be delivered as an enablement package, activating pre-existing code on eligible devices, ensuring a swift installation with minimal disruption. It will unlock features from earlier versions, specifically Windows 11 24H2 and 25H2, allowing a seamless transition with minimal operational downtime. The update is currently available to Windows Insiders and emphasizes a predictable, low-disruption experience for IT departments. Key advantages include a streamlined installation process, minimal user disruption, no need for complete reinstallation, consistent security and quality updates, and uniform compatibility checks. The specific release date has not been announced, but it will arrive in the latter half of 2026. The hardware requirements remain the same as previous versions: a minimum of 4GB of RAM, 64GB of storage, and a 1GHz 64-bit dual-core processor.

Winsage

June 17, 2026

I dug through the Windows 11 Insider builds for June 2026 and found 7 features worth paying attention to

Microsoft rolled out several preview builds of Windows 11 in early June 2026 as part of the Windows Insider Program, focusing on refining existing functionalities rather than introducing many new features. A new Beta channel for version 26H1 was launched, featuring: - Screen Tint: An accessibility feature that provides a system-wide color overlay to reduce eye strain, accessible through Settings > Accessibility > Vision > Screen Tint, offering six preset colors or custom hues. - Low Latency Profile: Temporarily boosts processor frequency for 1 to 3 seconds during interactive tasks, improving application launch times by up to 40% and interaction times by as much as 70%, operating automatically without manual toggles. - Widgets Experience Update: Widgets now open without hover activation, Taskbar badges are off by default, and alerts are limited until user interaction. The dashboard displays Widgets under "widgets," and badging aligns with the system accent color. - Magnifier Enhancements: Users can input specific zoom percentages directly and access additional zoom presets ranging from 5% to 400%. - File Explorer Changes: Improvements for compatibility, performance, and reliability, including support for paths with double backslashes and quotation marks, and middle-click support for opening folders in new tabs. - Windows Update: Unification of drivers, .NET, and firmware updates with monthly quality updates, reducing required restarts to one per month. - Windows Search Enhancements: Improved handling of typos, missing letters, and partial app names, prioritizing accurate search results even with input errors.