Some Windows 11 Secure Boot certificate errors, including BitLocker recovery loops and stuck KEK updates, remain unresolved ...

Microsoft and OEMs fixed key Secure Boot certificate issues for IT admins at a live office hours event, covering BIOS updates ...

It's an absolute beast with over 700 fixes and active zero-days landing right as major SQL and SharePoint versions hit end of ...

Join Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversations, ...

Following the reports last week using the Windows Global Device ID (GDID) in tracking a malware operators behavior, here is a comprehensive write-up about what goes into the GDID and how it is ...

Old UEFI shim bootloaders could be abused to bypass Secure Boot on any UEFI-based machine, regardless of the operating system ...

Will enabling TPM delete my files? No. Simply enabling or disabling the TPM in your BIOS will not delete your personal files. However, if your hard drive is encrypted with BitLocker, clearing or ...

TPM identity is a permanent hardware fingerprint that cannot be erased. Unlike GDID, a software identifier, TPM keys remain constant across system reinstalls. Users have no good options to completely ...

Turns out TPM wasn't Microsoft being difficult.

Obviously, there’s a lot going on. TPM’s staff spent yesterday reporting on and analyzing the last batch of Supreme Court decisions this term. Meanwhile, we’re hurdling toward midterm elections so ...

Back in May, we learned that security researchers found a vulnerability in Windows’ BitLocker encryption system. This vulnerability enabled bad actors to completely bypass the encryption if they got ...

The first Windows Secure Boot expiration date is here for more than a billion PCs, with more to come - and even some Linux distros are affected. Is your PC ready?