Microsoft Secure Boot certificate expiration guidance for Windows devices
Advisory/Mitigation
Summary
Hide ▲
Show ▼
Microsoft warned that Secure Boot certificates used by most Windows devices expire starting in June 2026, creating a risk that some personal and business systems may not boot securely. The company said affected devices could face boot disruption if the certificates are not updated in time. Microsoft urged customers to review the guidance and update certificates in advance to avoid that disruption.
Related Happenings
Microsoft adds Cloud-Initiated Driver Recovery for Windows Update driver rollbacks
Security Tool/Service
First: 15.05.2026 15:29
Last: 15.05.2026 15:29
Sources 1
About this happening:
Microsoft is adding **Cloud-Initiated Driver Recovery** to **Windows Update**, giving it a remote rollback control for **problematic Windows drivers**. The capability reduces how...
Microsoft adds Cloud-Initiated Driver Recovery for Windows Update driver rollbacks
Security Tool/ServiceAbout this happening: Microsoft is adding **Cloud-Initiated Driver Recovery** to **Windows Update**, giving it a remote rollback control for **problematic Windows drivers**. The capability reduces how...
Microsoft May 2026 Patch Tuesday release
Security Patch Release
First: 13.05.2026 13:36
Last: 13.05.2026 13:36
Sources 1
How related:
Microsoft on Tuesday released patches for 138 security vulnerabilities spanning its product portfolio, although none of them have been listed as publicly known or under active attack.
About this happening:
Microsoft's **May 13, 2026 Patch Tuesday** release fixed **138 vulnerabilities** across its product portfolio, including **Windows**, **Azure**, and **Edge**. None of the flaws we...
Microsoft May 2026 Patch Tuesday release
Security Patch ReleaseHow related: Microsoft on Tuesday released patches for 138 security vulnerabilities spanning its product portfolio, although none of them have been listed as publicly known or under active attack.
About this happening: Microsoft's **May 13, 2026 Patch Tuesday** release fixed **138 vulnerabilities** across its product portfolio, including **Windows**, **Azure**, and **Edge**. None of the flaws we...
Windows 10 KB5087544 extended security update
Security Patch Release
First: 12.05.2026 21:58
Last: 12.05.2026 21:58
Sources 1
About this happening:
**Microsoft** released **Windows 10 KB5087544** for **Windows 10 ESU/LTSC systems**, addressing **May 2026 Patch Tuesday vulnerabilities** and a **Remote Desktop warnings** issue....
Windows 10 KB5087544 extended security update
Security Patch ReleaseAbout this happening: **Microsoft** released **Windows 10 KB5087544** for **Windows 10 ESU/LTSC systems**, addressing **May 2026 Patch Tuesday vulnerabilities** and a **Remote Desktop warnings** issue....
Microsoft Windows 11 mandatory Patch Tuesday updates (KB5089549, KB5087420)
Security Patch Release
First: 12.05.2026 21:09
Last: 12.05.2026 21:09
Sources 1
About this happening:
Microsoft released **mandatory Windows 11 cumulative updates** for **KB5089549** and **KB5087420**, delivering the **May 2026 Patch Tuesday** fixes for **120 vulnerabilities** acr...
Microsoft Windows 11 mandatory Patch Tuesday updates (KB5089549, KB5087420)
Security Patch ReleaseAbout this happening: Microsoft released **mandatory Windows 11 cumulative updates** for **KB5089549** and **KB5087420**, delivering the **May 2026 Patch Tuesday** fixes for **120 vulnerabilities** acr...
Microsoft Defender false-positively flags DigiCert root certificates and removes some from Windows trust store
Security Tool/Service
First: 03.05.2026 21:11
Last: 03.05.2026 21:11
Sources 1
About this happening:
**Microsoft Defender** began falsely flagging valid **DigiCert root certificates** as **Trojan:Win32/Cerdigent.A!dha**, creating widespread false positives and risking certificate...
Microsoft Defender false-positively flags DigiCert root certificates and removes some from Windows trust store
Security Tool/ServiceAbout this happening: **Microsoft Defender** began falsely flagging valid **DigiCert root certificates** as **Trojan:Win32/Cerdigent.A!dha**, creating widespread false positives and risking certificate...
Timeline
-
10.02.2026 21:06 2 articles · 3mo ago
Microsoft continues Secure Boot certificate rollout in Windows 10 KB5075912
Mitigation Patch UpdateMicrosoft released Windows 10 KB5075912 and continues rolling out replacement Secure Boot certificates to targeted Windows devices through monthly Windows updates, expanding delivery only after devices show sufficient successful update signals ahead of the June 2026 expiration.
Show sources
- Microsoft releases Windows 10 KB5075912 extended security update — www.bleepingcomputer.com — 10.02.2026 21:06
- Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws — thehackernews.com — 13.05.2026 13:36
-
14.01.2026 11:38 2 articles · 4mo ago
Microsoft Secure Boot certificate expiration guidance for Windows devices
Initial DisclosureMicrosoft issued advance guidance for expiring **Secure Boot certificates** on **Windows devices** ahead of the **June 2026** deadline. The initial phase is a proactive mitigation effort aimed at preventing secure-boot disruption before certificate expiry takes effect.
Show sources
- Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited — thehackernews.com — 14.01.2026 11:38
- Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited — thehackernews.com — 14.01.2026 11:38