quality updates Archives

Winsage

July 10, 2026

Microsoft Urges Faster Windows Updates as AI Accelerates Attacks

The intersection of artificial intelligence and cybercrime poses significant challenges for organizations, as cybercriminals can quickly exploit vulnerabilities. Microsoft suggests that traditional patching methods are inadequate, urging organizations to adopt a more agile approach to patch management with rapid update deployment. They recommend reducing the time between the release of security updates and their deployment to less than three days, with deadlines for updates set to zero or one day and a maximum grace period of two days. Additionally, Microsoft advocates for a phased deployment strategy, testing updates on select devices before wider rollout, and utilizing features like Hotpatch and Conditional Access policies to enhance security and expedite update processes.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 23, 2026

Microsoft Confirms Windows 11 26H2 Update for x86-64 PCs

Microsoft has confirmed the release of the Windows 11 update version 26H2, designed for PCs with x86-64 processors from Intel and AMD. Devices with Qualcomm Snapdragon Elite and NVIDIA RTX Spark processors will receive a separate update. Earlier this year, Windows 11 26H1 was introduced for Windows-on-Arm devices. Windows 11 26H2 is a minor update that shares the same code base as version 25H2, allowing for a seamless transition without a complete system file replacement. The update process is straightforward and will consolidate security and quality updates. Microsoft will provide security updates for Windows 11 versions 24H2, 25H2, and 26H2 for two years. Windows 11 Enterprise LTSC editions will offer stability by locking onto a specific kernel code base for security updates until a future date.

Winsage

June 22, 2026

Windows 11 26H2 arrives as a tiny unlock, not a massive download

Microsoft has confirmed the release of Windows 11 26H2, scheduled for Fall 2026. This update focuses on improving the update experience for businesses and IT professionals by streamlining maintenance processes. Windows 11 26H2 will be delivered as an enablement package, activating pre-existing code on eligible devices, ensuring a swift installation with minimal disruption. It will unlock features from earlier versions, specifically Windows 11 24H2 and 25H2, allowing a seamless transition with minimal operational downtime. The update is currently available to Windows Insiders and emphasizes a predictable, low-disruption experience for IT departments. Key advantages include a streamlined installation process, minimal user disruption, no need for complete reinstallation, consistent security and quality updates, and uniform compatibility checks. The specific release date has not been announced, but it will arrive in the latter half of 2026. The hardware requirements remain the same as previous versions: a minimum of 4GB of RAM, 64GB of storage, and a 1GHz 64-bit dual-core processor.

Winsage

June 17, 2026

I dug through the Windows 11 Insider builds for June 2026 and found 7 features worth paying attention to

Microsoft rolled out several preview builds of Windows 11 in early June 2026 as part of the Windows Insider Program, focusing on refining existing functionalities rather than introducing many new features. A new Beta channel for version 26H1 was launched, featuring: - Screen Tint: An accessibility feature that provides a system-wide color overlay to reduce eye strain, accessible through Settings > Accessibility > Vision > Screen Tint, offering six preset colors or custom hues. - Low Latency Profile: Temporarily boosts processor frequency for 1 to 3 seconds during interactive tasks, improving application launch times by up to 40% and interaction times by as much as 70%, operating automatically without manual toggles. - Widgets Experience Update: Widgets now open without hover activation, Taskbar badges are off by default, and alerts are limited until user interaction. The dashboard displays Widgets under "widgets," and badging aligns with the system accent color. - Magnifier Enhancements: Users can input specific zoom percentages directly and access additional zoom presets ranging from 5% to 400%. - File Explorer Changes: Improvements for compatibility, performance, and reliability, including support for paths with double backslashes and quotation marks, and middle-click support for opening folders in new tabs. - Windows Update: Unification of drivers, .NET, and firmware updates with monthly quality updates, reducing required restarts to one per month. - Windows Search Enhancements: Improved handling of typos, missing letters, and partial app names, prioritizing accurate search results even with input errors.

Winsage

June 10, 2026

Microsoft releases Windows 10 KB5094127 extended security update

Microsoft has released the Windows 10 KB5094127 extended security update, which addresses vulnerabilities identified during the June 2026 Patch Tuesday and enhances monitoring of updated Secure Boot certificates. Users on Windows 10 Enterprise LTSC or enrolled in the ESU program can install it via the Windows Update settings. The update upgrades Windows 10 to build 19045.7417 and Windows 10 Enterprise LTSC 2021 to build 19044.7417. It focuses on security enhancements and bug fixes, resolving a total of 200 vulnerabilities, including three zero-day flaws. Key features include improved File Explorer search functionality for Chinese text and UTF-8 encoded files, dynamic status reporting for Secure Boot states, a new policy setting to limit Secure Boot service data sent to Microsoft, and enhanced targeting data for automatic receipt of new Secure Boot certificates. A known issue may cause BitLocker recovery notifications on certain systems, particularly those with specific BitLocker Group Policy settings. Microsoft recommends removing the Group Policy setting and suspending/resuming BitLocker as a temporary fix.

Winsage

May 30, 2026

How to Free Up Disk Space on Windows 11

Your C: drive may be full, causing Windows to send reminders about low disk space or updates failing to install. Windows 11 includes built-in tools to help reclaim disk space. The guide outlines methods for recovering space, starting with the quickest techniques. 1. Cleanup Recommendations: Navigate to Start > Settings > System > Storage > Cleanup recommendations to review and remove temporary files, large or unused files, and apps. Deleting the previous Windows installation can recover several gigabytes but is irreversible. 2. Clear Temporary Files Manually: Go to Start > Settings > System > Storage > Temporary files to manually select and remove temporary files. 3. Empty the Recycle Bin: Right-click the Recycle Bin and select Empty Recycle Bin to reclaim space from deleted files. 4. Find and Move Large Personal Files: Use File Explorer to locate and move large files from Videos, Music, Pictures, or Downloads to an external drive. 5. Uninstall Unused Apps: Uninstall applications via Start > Settings > Apps > Installed apps, the Start menu, or Control Panel. 6. Turn On Storage Sense: Activate Storage Sense in Start > Settings > System > Storage to automate cleanups. 7. Configure Storage Sense Schedule: Adjust the schedule for Storage Sense cleanups in Start > Settings > System > Storage > Storage Sense. 8. Use Classic Disk Cleanup: Access the classic Disk Cleanup tool by typing "disk cleanup" in the search box to remove system files and items overlooked by the Settings scan. 9. Free Up Local Space with OneDrive Files On-Demand: Enable Files On-Demand in OneDrive settings to keep files in the cloud and free up local space. 10. Redirect Where New Content Is Saved: Change the default save location for new files in Start > Settings > System > Storage > Advanced storage settings. 11. Use External Storage to Install a Stuck Update: Connect an external USB drive with at least 10 GB of free space to assist with installing updates. 12. Rule Out Malware: Run a Windows Security antivirus scan if disk space continues to disappear unexpectedly. Deleting files in File Explorer moves them to the Recycle Bin, and space is not reclaimed until it is emptied. Deleting the previous Windows installation is irreversible and can only be done within 10 days of an upgrade. The KB5074105 update changed the scan context for Temporary files, preventing certain admin-restricted items from being detected. Storage Sense operates only on the system drive and does not automatically delete files in Downloads or OneDrive unless configured.

Winsage

May 18, 2026

Microsoft Changes ‘Most Windows Devices’ In June—Update Yours Now

Microsoft has alerted users that Secure Boot certificates will begin to expire in June, affecting most Windows devices. Users must update these certificates to avoid disruptions, as failing to install the latest Windows update could prevent devices from booting securely. A "one-time restart" will be required after the update to load new certificates. If the update is not installed by June 1, users may see a red stop icon in the Windows Security app. The update issued on May 12 was modified on May 15 to warn that it might fail to install. Microsoft indicates that most users will need to restart their PCs, although this may revert the update. The latest updates will expand the number of devices eligible for new Secure Boot certificates, but users are uncertain about how many PCs will be affected due to a phased rollout approach.

Winsage

May 13, 2026

Microsoft releases Windows 10 KB5087544 extended security update

Microsoft has released the Windows 10 KB5087544 extended security update, which addresses vulnerabilities identified during the May 2026 Patch Tuesday and resolves issues related to Remote Desktop warnings. Users on Windows 10 Enterprise LTSC or enrolled in the ESU program can install it via Settings under Windows Update. The update upgrades Windows 10 to build 19045.7291 and Windows 10 Enterprise LTSC 2021 to build 19044.7291. The update focuses on security enhancements and bug fixes, addressing 120 vulnerabilities. Key fixes include resolving incorrect Remote Desktop security warning dialogs in multi-monitor setups, introducing dynamic status reporting for Secure Boot, and adjusting Daylight Savings Time for Egypt. A known issue may require users to input their BitLocker recovery key after installation, affecting systems with specific BitLocker Group Policy configurations. Microsoft suggests removing the affected Group Policy setting and suspending and resuming BitLocker as a temporary solution.