Atalay Sinan Tekin/iStock/Getty Images Plus
Follow ZDNET: Add us as a preferred source on Google.
ZDNET's key takeaways
Secure Boot protects your PC against bootkit malware.
The Windows update refreshes expiring Secure Boot certificates.
To install, head to Settings and select Windows Update.
I typically advise Windows users to install each new monthly Patch Tuesday update for the security fixes alone. But the January update is one you'll especially want to snag. That's because it will keep your PC protected against a nasty form of malware.
Bootkit malware aims to infect your PC before Windows and your security software even load. To guard against these threats, Secure Boot is a security feature that relies on certificates to ensure that only trusted programs kick off during the boot process. Now, those certificates are soon to expire. And that's where the latest Windows update comes into play.
Launched on Tuesday, KB5074109 for Windows 11 and KB5073724 for Windows 10 include a variety of fixes. But the most important one is the refresh for the Secure Boot certificates. With those certificates due to expire in June, the latest updates replace the expiring ones with fresh new ones that promise to last for a long time.
Also: Is turning off Windows Security a bad idea in 2026? A PC expert's bottom line
... continue reading