Reboots Archives

Winsage

July 5, 2026

How I think Microsoft’s campaign to fix Windows 11 is going so far — the verdict now we’re 3 months in

Microsoft is working to improve Windows 11, having started this initiative in late March 2026. Key changes include a customizable Start menu, a repositioned and adjustable taskbar, and a refined widgets board that removes the default MSN feed with ads. Windows search results have been optimized to reduce clutter, and new options allow Home users to delay updates indefinitely, along with bundling updates to minimize reboots. Performance enhancements include faster File Explorer launch speeds, a 'Low Latency Profile' for improved CPU performance, a 'turbo mode' for quicker installations, and a 'Driver Quality Initiative' to enhance OS drivers and reduce battery drain. A point-in-time restore feature has also been introduced. Microsoft is engaging with the Windows community for feedback and has established panels for user testing. However, bugs remain a concern, particularly with the Recycle Bin and storage issues, indicating a need for a stronger quality assurance process. Users have expressed interest in removing intrusive recommendations, installing Windows 11 with a local account, and disabling telemetry in the Home version.

Winsage

June 29, 2026

Microsoft keeps Windows Server 2022 hotpatching alive into 2027

Microsoft has extended the availability of Windows Server 2022 hotpatching until 2027, specifically for the Windows Server 2022 Datacenter: Azure Edition. Mainstream support for Windows Server 2022 will end on October 13, 2026, while extended support will last until October 14, 2031. Hotpatching allows administrators to apply security updates without server downtime, although quarterly cumulative updates requiring a reboot will still occur. This feature is exclusive to Azure Edition users, with no similar support for on-premises users of Windows Server 2022. Additionally, hotpatch updates are being introduced for Windows 11 24H2 Enterprise clients and are now the default for Windows Autopatch.

Winsage

June 27, 2026

Microsoft now lets you pause Windows updates indefinitely and cuts restarts down to one a month

The Windows team at Microsoft has introduced a calendar-based option for pausing updates, allowing users to select a specific end date for their pause, extending up to 35 days. Users can set this by navigating to Settings > Windows Update and choosing their end date from a calendar. The calendar pause is not permanent; once the pause period ends, Windows will automatically check for and install updates. Users can manually reset the pause to extend it further by another 35 days. Additionally, Microsoft is consolidating driver, .NET, and firmware updates into a single monthly restart to enhance user experience. The "Update and shut down" feature has been improved, allowing users to shut down their PCs without installing pending updates. The calendar pause feature is available in the June optional update KB5095093, while the other changes are accessible to Windows Insiders in the Experimental and Beta channels.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 24, 2026

Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A malware campaign targets Windows systems through a malicious npm package named postcss-minify-selector-parser, which mimics the legitimate postcss-selector-parser. This counterfeit package installs a Remote Access Trojan (RAT) on developer machines, beginning with a multi-stage attack triggered by the installation of the package. The RAT can steal credentials, execute shell commands, and communicate with a remote attacker. Security researchers at JFrog identified this threat and reported it on June 22, 2026, noting that two additional related packages, postcss-minify-selector and aes-decode-runner-pro, are linked to the same publisher and remain live on the npm registry. The RAT employs encrypted HTTP communication with a command-and-control (C2) server and ensures persistence by creating a registry key under the Windows Run key. It has capabilities for remote shell execution, file uploads and downloads, and can steal saved login data from Google Chrome using Windows decryption APIs. The malware is designed for organized batch exfiltration of stolen data. Indicators of compromise include specific IP addresses, domains, file paths, and SHA-256 hashes associated with the malware components. JFrog advises users to remove the malicious packages, inspect their dependency trees, and treat any stored credentials as compromised.

Winsage

June 24, 2026

Windows 11 24H2 EOL: Resolve Version Drift with TruRisk Eliminate

Windows 11 version 24H2 will reach the end of servicing on October 13, 2026. Enterprises often face version drift, requiring different upgrade strategies for various Windows 11 builds across endpoints. Upgrade methods include enablement packages, ISO-based feature updates, or direct upgrades from Windows 10. Enablement packages are the quickest and least disruptive option for compatible Windows 11 systems. Qualys TruRisk Eliminate can standardize upgrades and minimize version drift on a large scale. Endpoints should be assessed for readiness, categorized by eligibility and current OS status. Enablement packages are recommended for recent Windows 11 builds due to their minimal download size, faster installation, and reduced operational impact. If enablement packages are unavailable, ISO-based feature updates may be necessary. Direct upgrades from Windows 10 to Windows 11 25H2 can be executed without intermediate transitions. Qualys TruRisk Eliminate provides tools for managing these upgrade processes effectively.

Winsage

June 15, 2026

Fed up with constantly installing various updates for Windows 11? Microsoft is making monthly multiple reboots a thing of the past

Microsoft is revamping the delivery of updates for Windows 11 by bundling updates for essential components like .NET, drivers, and firmware with the monthly update cycle, currently in testing. The latest preview build (26300.8687) includes improvements to default applications, particularly the Calculator app, which will enhance readability in high contrast themes and fix inaccuracies in square-root calculations. Users will also have the option to delay monthly updates indefinitely to address concerns about update installation failures.

Winsage

June 15, 2026

Microsoft released the Windows 11 Secure Boot update for all PCs, how to verify yours

Microsoft has expanded the rollout of the Secure Boot 2023 certificate update to more Windows 11 and Windows 10 devices with the June 2026 Patch Tuesday update (KB5094126). This update aims to ensure that most supported consumer PCs are classified as high confidence, meaning necessary certificates are either installed or will be applied automatically. Secure Boot is a firmware security feature that verifies the software attempting to load during the startup process, blocking unauthorized software. The certificates supporting Secure Boot, issued in 2011, are expiring in stages starting June 24, 2026, prompting Microsoft to deploy replacement certificates. Most home users do not need to take manual action as the updates will occur automatically via Windows Update. Users can check their Secure Boot certificate status in the Windows Security app. A yellow warning indicates pending compatibility data, while a red alert suggests a firmware incompatibility requiring a BIOS update. Multiple reboots during the update process are normal, and a new SecureBoot folder in Windows is for staging cryptographic files. Older PCs may experience longer update times, and some may not receive updates due to firmware issues. HP users should check for BIOS updates if encountering BitLocker recovery loops. IT administrators should monitor device classifications and manually initiate updates for devices not in the high confidence category. Devices with Secure Boot disabled cannot receive updates, leaving them vulnerable. The expiration of the Microsoft Corporation KEK CA 2011 certificate on June 24 does not immediately affect device functionality, but it limits Microsoft's ability to sign new bootkit blacklist updates.

Winsage

June 12, 2026

Windows NT on the GameCube is Basically a Homebrew Project That Brings the Classic OS to Nintendo Hardware

GameCube enthusiasts are utilizing homebrew projects to enhance the console's capabilities, including region-free play and disc backups. A new initiative allows a full PowerPC build of Windows NT to run on the GameCube, leveraging its Gekko CPU's compatibility with early PowerPC-based PCs. The entii-for-workcubes project, led by Wack0, provides components for running Windows NT 3.51 or 4.0 on GameCube and Wii systems, featuring an ARC firmware bootloader for loading homebrew software. Users need to prepare an SD card with specific files and a Windows NT ISO to initiate the process. After installation, basic productivity tools are accessible, but limitations include only 24MB of RAM, slower access speeds, lack of sound support, and potential reboot stalls.