Microsoft plans to roll out the June 2026 security update for Windows 11 versions 25H2 and 24H2 on June 9, delivering a rare combination of critical security patches and new user-facing features. The cumulative update, tracked as KB5089573, marks a departure from the typical Patch Tuesday formula, which usually focuses exclusively on vulnerability fixes.

Earlier previews of KB5089573 in the Release Preview Channel revealed that this release is more than just a security refresh. It includes several feature enhancements that have been polished over months of Insider testing, and now Microsoft is pushing them to all supported Windows 11 PCs via Windows Update, WSUS, and the Microsoft Update Catalog.

What’s New in KB5089573

The June 2026 security update introduces features that were originally developed as part of Microsoft’s ongoing effort to make Windows 11 more adaptive to modern hardware. Among the most notable changes are improvements to Task Manager that provide real-time monitoring of Neural Processing Unit (NPU) activity, a capability increasingly important as AI-powered applications become mainstream.

Task Manager now displays NPU usage per process, similar to the way it already tracks CPU, memory, disk, and GPU utilization. This change helps users and IT professionals diagnose performance issues related to AI workloads, such as those from Windows Copilot, background blurring in video calls, or on-device speech recognition.

Another key addition is a redesigned system tray that groups notifications more intelligently and reduces clutter by collapsing secondary icons behind a single overflow button. This tweak, while small, has been highly requested by users who juggle multiple background apps.

Additionally, the update includes a fix for a long-standing bug where File Explorer would sometimes freeze when interacting with network shares. Several enterprise customers reported that this improved reliability alone makes KB5089573 a priority deployment.

Security Fixes Included

As a Patch Tuesday release, KB5089573 also addresses dozens of security vulnerabilities. While the full list will be published in the Microsoft Security Response Center on release day, early information suggests patches for critical remote code execution flaws in the Windows Print Spooler and Hyper-V, as well as elevation-of-privilege issues in the Windows Kernel. One zero-day vulnerability that was actively exploited in targeted attacks against financial institutions is also expected to be plugged.

IT administrators should prepare to deploy the update quickly given the severity of the fixed vulnerabilities. The combination of feature improvements and critical security patches makes this an unusual but compelling update that cannot be postponed without risk.

Enterprise Impact and Management

For enterprise IT teams, the June 2026 security update presents both an opportunity and a challenge. Deploying feature updates through the security patch channel simplifies the update process — there is no need to approve a separate feature update package. However, the introduction of new UI behavior and the NPU monitoring in Task Manager may require compatibility testing with line-of-business applications, especially those that rely on direct hardware access or older graphics drivers.

Microsoft advises organizations to test the update in a staging environment before broad rollout. The NPU monitoring feature, in particular, relies on updated drivers from Intel, AMD, and Qualcomm; systems with outdated drivers may see inconsistent results or Task Manager errors. Fortunately, the update does not change any default privacy settings or data collection, and the NPU data remains on the device.

Windows Update for Business and Windows Server Update Services (WSUS) will offer the same package, with no separate ESD files for features. Admins using Microsoft Intune can use feature update policies to delay the deployment if needed, but they cannot cherry-pick which parts of KB5089573 to install — it’s all-or-nothing.

The Blurring Line Between Features and Security

KB5089573 exemplifies a trend Microsoft has embraced since the release of Windows 11: delivering new features through monthly cumulative updates, not just annual feature updates. Previously, such feature drops were called “Moments” and were delivered through optional preview updates that later became part of the mandatory Patch Tuesday release. The June 2026 update continues that practice but on a larger scale, treating the security update as the primary vehicle for these enhancements.

This approach ensures that all users get the same improvements at the same time, reducing fragmentation across the Windows ecosystem. However, it also raises concerns among enterprises that prefer to validate new features on their own schedule. Microsoft offers group policies to control some of these features, but the binaries are still present on the system after the update, even if they are turned off.

Task Manager NPU: Preparing for an AI-First World

The addition of NPU monitoring in Task Manager is a clear signal that Microsoft sees AI as a core workload for Windows 11. The latest processors from Intel (Meteor Lake and beyond), AMD (Ryzen 7000 mobile series and newer), and Qualcomm (Snapdragon X Elite) all include dedicated NPUs. These chips accelerate tasks such as Windows Studio Effects, real-time translation, and local inference for small language models.

By surfacing NPU usage in Task Manager, Microsoft gives power users and IT admins visibility into whether these AI features are actually working. For example, if background blur is enabled but the NPU shows 0% utilization, it may indicate that the effect is running on the CPU or GPU instead, draining battery and slowing the system. Over time, this transparency could drive developers to optimize their AI features for the NPU.

What Didn’t Make the Cut

Rumors suggested that KB5089573 might also include the long-awaited ability to move the taskbar to the top or sides of the screen, but that feature is not present in the final build. Similarly, a preview of a new “File Explorer Gallery” mode, which was tested in earlier Dev Channel builds, did not ship. Microsoft has not commented on whether these features will appear in a future update.

Some Insiders reported that the update originally included a “responsive taskbar” that would automatically hide when not in use on tablets, but this feature was pulled due to compatibility issues with certain touch drivers. The “respo” snippet seen in early documentation likely referred to this, though the final release focuses only on the system tray redesign.

How to Install KB5089573

On June 9, users can install the update by navigating to Settings > Windows Update and clicking “Check for updates.” Alternatively, the update will be offered automatically over the following days. Direct downloads will be available from the Microsoft Update Catalog, and organizations can import it into WSUS or Intune.

The update is cumulative, so it includes all previous fixes. It does not change the operating system version number — 25H2 will remain build 26100.x, and 24H2 will stay at 26100.x — but the revision number will increase to reflect the patch.

Looking Ahead

Microsoft’s decision to pack feature changes into a security update underscores the company’s commitment to keeping Windows 11 dynamic and competitive. With the AI ecosystem maturing rapidly, expect more such updates that blend protection with progress. IT administrators should adjust their patch management strategies accordingly, treating each cumulative update as potentially transformative rather than just a maintenance task.

The next milestone will be the official release of Windows 11 version 26H2 in the fall, which is expected to bring deeper AI integration and a refreshed interface. Until then, KB5089573 serves as a bridge, delivering meaningful improvements while keeping devices secure.