Particle.news
Download on the App Store
4 ARTICLES
·
2h ago

Microsoft Releases January 2026 Windows Updates With Security Fixes, Secure Boot Refresh

The release begins a phased refresh of expiring Secure Boot certificates to keep boot protections intact.

Overview

  • Windows 11 cumulative updates KB5074109 (25H2/24H2) and KB5073455 (23H2) are now mandatory via Windows Update, moving 25H2 to Build 26200.7623 and 24H2 to 26100.7623.
  • Windows 10 ESU customers received KB5073724, which raises the OS to Build 19045.6809 and addresses 114 vulnerabilities, including three zero‑day flaws.
  • Microsoft is deploying new Secure Boot certificates using targeted, signal‑based delivery to replace 2011 keys that are expiring in 2026.
  • The updates remove legacy modem drivers (agrsm64.sys, agrsm.sys, smserl64.sys, smserial.sys), which can disable modem hardware that depends on them.
  • The release updates WinSqlite3.dll and fixes issues affecting WSL mirrored networking, AVD RemoteApp connections, and NPU idle power, and Microsoft notes a known bug that hides the password visibility button.