Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Microsoft Warns Secure Boot May Be Bypassed as Windows UEFI Certificates Expire

Microsoft has released updates addressing a critical security feature bypass vulnerability in Windows Secure Boot certificates, identified as CVE-2026-21265. These updates were included in the January 2026 Patch Tuesday release.

PBy Paige MonroeJan 14, 20262 min read

Microsoft has released updates addressing a critical security feature bypass vulnerability in Windows Secure Boot certificates, identified as CVE-2026-21265. These updates were included in the January 2026 Patch Tuesday release.

The vulnerability arises from expiring certificates issued in 2011, which are integral to Secure Boot's trust chain. If left unpatched, they could allow attackers to compromise boot integrity.

This issue is rated as Important with a CVSS v3.1 base score of 6.4. Exploitation requires local access, high privileges, and a high level of attack complexity, decreasing the likelihood of a successful attack.

The vulnerability occurs because Microsoft certificates stored in UEFI KEK and DB are approaching expiration in mid-2026. Without updates, Secure Boot functionality may be at risk.

Firmware defects in the operating system's certificate update mechanism can disrupt the trust chain, affecting Windows Boot Manager and third-party loaders. While publicly disclosed, this vulnerability has not been exploited in the wild. Microsoft recommends the immediate deployment of 2023 replacement certificates.

Three key 2011 certificates require renewal to maintain Secure Boot:

Microsoft Corporation KEK CA 2011 : Signs updates to DB and DBX, expiring on Tue, Jun 24, 2026. Microsoft Corporation UEFI CA 2011 : Signs third-party boot loaders and Option ROMs, expiring on Fri, Jun 27, 2026. Microsoft Windows Production PCA 2011 : Signs the Windows Boot Manager, expiring on Sun, Oct 19, 2026.

Failure to update these certificates exposes devices to boot-time attacks, as highlighted in Microsoft's November 2025 advisory.

These updates were included in the January 2026 Patch Tuesday release.
Paige Monroe · Thehackingpost

Patches are available for legacy Windows Server and extended-support editions, with customer action required.

Product KB Article Build Number Update Type

Windows Server 2012 R2 (Core) 5073696 6.3.9600.22968 Monthly Rollup

Windows Server 2012 R2 5073696 6.3.9600.22968 Monthly Rollup

Windows Server 2012 (Core) 5073698 6.2.9200.25868 Monthly Rollup

Windows Server 2012 5073698 6.2.9200.25868 Monthly Rollup

Advertisement

Windows Server 2016 (Core) 5073722 10.0.14393.8783 Security Update

Windows Server 2016 5073722 10.0.14393.8783 Security Update

Windows 10 Version 1607 x64 5073722 10.0.14393.8783 Security Update

Windows 10 Version 1607 x86 5073722 10.0.14393.8783 Security Update

Organizations with IT-managed or Microsoft-managed updates should prioritize deployment. It is recommended to verify firmware compatibility to prevent post-patch boot issues.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026