Home / Technology / Windows Security Alert: Expiring Certificates Pose Risk
Windows Security Alert: Expiring Certificates Pose Risk
15 Apr
Summary
- New Windows updates provide visual cues for Secure Boot status.
- Older Secure Boot certificates expire in June, risking protection.
- April updates patch 164 vulnerabilities, including zero-days.

Microsoft has introduced a new visual indicator in Windows 11 and Windows 10 to display the status of Secure Boot, a crucial defense against bootkit malware. This update, part of the April Patch Tuesday release, aims to ensure users are protected by newer Secure Boot certificates before the older ones expire in June.
The Secure Boot status is now visible in the Device Security section of Windows Security, using colored icons: green for protected, yellow for recommended action, and red for immediate attention. However, a green icon doesn't guarantee complete safety, as accompanying messages provide further details on whether older certificate configurations require an update.
To obtain the necessary Secure Boot certificate updates, users are advised to install the latest Windows updates available through Windows Update. Failing to do so by June will render Secure Boot less effective against threats. The April updates are particularly significant, patching 164 vulnerabilities, including eight critical flaws and two zero-day exploits, underscoring the urgency of updating.