Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
YellowKey BitLocker Bypass Defeated: Microsoft’s June 2026 Patch Repairs TPM-Only Encryption Weaknesses
Microsoft's June 2026 Patch Tuesday fixes two critical BitLocker vulnerabilities, CVE-2026-45585 (YellowKey) and CVE-2026-50507, which allow attackers with physical access to bypass TPM-only encryption and access recovery keys, emphasizing the need for multi-factor BitLocker protectors.
KB5094126: Microsoft Pushes Secure Boot 2023 Certificate to Millions of Windows 11 PCs, Triggering BitLocker Alerts
Microsoft's June 2026 KB5094126 update extends the Secure Boot 2023 certificate to most Windows 11 consumer PCs, triggering BitLocker recovery prompts for many users. This is part of a long-running effort to revoke legacy certificates and protect against UEFI bootkits. Preparation—especially backing up the recovery key—is essential before applying the patch.
Novo Nordisk Breach Exposes Patient Data as Oral Wegovy Nears Medicare Coverage
Novo Nordisk faces a major cybersecurity breach that exposed patient data just as it prepares for a Medicare-driven surge in oral Wegovy prescriptions on July 1. The breach, likely via a zero-day in a file-transfer appliance, has raised concerns about regulatory fines and patient safety amid intensifying GLP-1 competition. The incident underscores the growing digital risks for pharma companies leveraging cloud and Windows-based systems.
Countdown to June 2026: Linux Admins Must Replace Microsoft’s Secure Boot Certificate or Risk Unbootable Systems
Microsoft's UEFI CA 2011, used to validate Linux bootloaders under Secure Boot, expires on June 21, 2026. Linux administrators must ensure systems trust the replacement CA 2023, update shim packages, and apply firmware updates to prevent unbootable machines.
Windows 11 KB5094126: Secure Boot Certificate Refresh May Force BitLocker Recovery
KB5094126, released on June 9, 2026, for Windows 11 24H2 and 25H2, refreshes Secure Boot certificates and may trigger BitLocker recovery prompts. The update also includes a servicing stack update and monthly security patches. Users should back up their BitLocker recovery key before installing to avoid boot failures.
Tesla's OTA Update Splits Braking Profiles, Adds Pin-to-Drive Security in 2026.8
Tesla's 2026.8 OTA update introduces three distinct regenerative braking profiles (Standard, Gentle, Roll) and a new Pin-to-Drive security feature. Additional improvements include dashcam clip trimming, driver-profile refinement, and interface naming standardization, with the 2026.8.3 point release adding regional Cloud Profiles.
Microsoft Delivers Final Ultimatum: TLS 1.0/1.1 Ends for Exchange Online POP3 and IMAP4 in July 2026
Microsoft will permanently block Exchange Online POP3 and IMAP4 connections using TLS 1.0 or 1.1 starting in July 2026, ending a years-long rollout. The cutoff primarily threatens non-human clients—printers, scanners, legacy apps, and monitoring tools—while modern Outlook and ActiveSync users remain unaffected. IT administrators must inventory and update all affected devices now, using relays or API switches where firmware updates are impossible, to avoid disruptions.
The Hidden Danger of Sticking with Windows 10 After October 2025: Why Antivirus Isn’t Enough
On October 14, 2025, Microsoft ended support for Windows 10, ceasing security updates. While antivirus software remains important, it cannot compensate for the missing layer of protection that patches provide, leaving systems vulnerable to exploits. Users must now consider upgrading to Windows 11 or adopting alternative mitigations to stay secure.
KB5094126 Update Cripples Windows 11 PCs with Boot Failures and BitLocker Recovery Loops
Microsoft's June 2026 Patch Tuesday update KB5094126 (build 26200.8655) is causing widespread boot failures, BitLocker recovery loops, and Secure Boot errors on Windows 11. The update appears to corrupt the boot chain through changes to the Secure Boot DBX and boot manager, leaving many users locked out of their systems. Recovery requires manual intervention, and organizations are pausing deployment while awaiting an official fix.
Microsoft Crushes Persistent Green Screen Crashes in Windows 11 Canary Build 29610.1000
Windows 11 Insider Canary Build 29610.1000 lands with critical fixes for green screen crashes (KERNEL_SECURITY_CHECK_FAILURE) and storage bugs, stabilizing the experimental 29600 series. Released June 12, 2026, the build lets testers run cutting-edge platform work without frequent crashes, reflecting Microsoft's rapid response to Insider feedback.
Mandatory Patch Tuesday, Insider Builds, and Edge Tweaks: Inside Microsoft’s June 2026 Update Blitz
Microsoft’s June 9, 2026 Patch Tuesday bundled mandatory security fixes, expedited Defender EDR servicing, Edge release-channel changes, new PowerToys features, and surprise Xbox exclusives on PC. Insider builds teased upcoming 24H3 enhancements, while inbox-app refreshes improved productivity and accessibility across the Windows ecosystem.
Windows 11 June 2026 Patch Tuesday Lands: Edge Goes Biweekly, Xbox Steals the Show
Microsoft’s June 2026 Patch Tuesday delivered critical Windows 11 fixes but was overshadowed by a biweekly Edge update cadence and a landmark Xbox showcase. Insider builds pushed AI deeper into the OS, while new first-party games and a cross-platform pivot signal Microsoft’s evolution away from exclusivity walls.
Microsoft Cuts Windows Search Trigger to Two Characters: KB5094126 Brings Faster File Finding to Windows 11
Microsoft's June 2026 cumulative update KB5094126 for Windows 11 24H2 and 25H2 reduces the minimum characters required for Windows Search to find files from three to two. The update also improves result ranking, prioritizing recent and frequently accessed items. This change aims to make file retrieval faster and more intuitive for millions of Windows users.