Loading story…
Microsoft has officially announced the rollout of Windows 11 25H2, marking a significant update to its operating system with a focus on security improvements and a more efficient installation process. The update is being gradually released to both individual users and organizations, with the option to manually install it or wait for it to become available through standard update channels. Unlike previous annual updates, Windows 11 25H2 is designed to be ultra-compact, utilizing enablement packages (eKB) that are less than 200KB in size, allowing for a single-restart installation and minimizing downtime. This streamlined approach swaps out only the necessary files rather than replacing the entire system, resulting in a faster and more reliable update experience. Both Windows 11 25H2 and 24H2 now share the same code base, ensuring that they will receive identical cumulative updates, features, and fixes moving forward, though some features are exclusive to the 25H2 version. A key highlight of the 25H2 update is the introduction of significant advancements in build and runtime vulnerability detection, as well as the implementation of AI-assisted secure coding, which aims to proactively address and mitigate security threats within Microsoft’s software and services. For enterprise environments, the update brings support for Wi-Fi 7 and introduces an optional feature that allows IT administrators to remove select pre-installed Microsoft Store apps via Group Policy, enhancing customization and security posture. The update also removes legacy components such as PowerShell 2.0 and the Windows Management Instrumentation command-line (WMIC), reducing the attack surface and aligning with modern security standards. Microsoft emphasizes that these changes are part of its Secure Future Initiative, reflecting a broader commitment to improving the security and reliability of its platforms. The update resets the support lifecycle, granting another 36 months of support for Enterprise and Education editions, which is particularly relevant for organizations planning long-term deployments. While the update does not introduce major new features for consumers, its focus on security, stability, and manageability is expected to benefit both end users and IT departments. Microsoft advises that most users will not see the update immediately due to the gradual rollout, but it will become widely available through Windows Server Update Services (WSUS) by mid-October. The company also provides tools such as the Installation Assistant for those who wish to expedite the upgrade process. Overall, Windows 11 25H2 represents a strategic step forward in Microsoft’s efforts to deliver a secure, efficient, and manageable operating system for both consumers and enterprises.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft announced that eligible consumer PCs running Windows 11 Home and Pro version 24H2 will be automatically updated to Windows 11 25H2. The company said the move is driven by security because support for Windows 11 24H2 ends on October 13, while organization-managed PCs are excluded from the forced rollout.
Microsoft released the Windows 11 2025 Update, version 25H2, making the feature update available to users. Multiple reports describe it as a compact update with installation requiring only a single restart.
7 references tracked. Mallory keeps watching after this page renders.
support.microsoft.com
Open sourcezdnet.fr
Open sourceghacks.net
Open sourcezdnet.com
Open sourcesupport.microsoft.com
Open sourcezdnet.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released cumulative updates KB5066835 and KB5066793 for Windows 11 versions 25H2/24H2 and 23H2 as part of the October 2025 Patch Tuesday. These updates are mandatory and address a range of security vulnerabilities discovered in previous months, ensuring that systems remain protected against the latest threats. The updates can be installed automatically through Windows Update or manually via the Microsoft Update Catalog, providing flexibility for both end users and enterprise administrators. After installation, the build numbers for Windows 11 25H2 and 24H2 are updated to Build 26200.6899 and 26100.6899, respectively, while 23H2 is updated to 226x1.6050. This release marks the first Patch Tuesday update for version 25H2, which shares its codebase with 24H2, resulting in identical fixes and improvements across both versions. Notably, this is the penultimate update for Windows 11 23H2, as its support is scheduled to end in November 2025. The update resolves several issues, including a bug that caused the print preview screen to freeze in Chromium-based browsers, and a problem where apps and games became unresponsive if users signed in with only a Gamepad at the lock screen. PowerShell Remoting and Windows Remote Management (WinRM) timeouts have been addressed, improving reliability for remote administration tasks. An issue preventing audit events from being logged has also been fixed, enhancing system monitoring and compliance. The update improves the setup process for Windows Hello face recognition, particularly when using USB infrared camera modules, ensuring smoother biometric authentication. Microsoft emphasizes the importance of keeping security intelligence up to date in its antimalware products, such as Microsoft Defender Antivirus, to maintain robust protection against evolving threats. Security intelligence updates are delivered automatically via Windows Update, but users and administrators can also trigger manual updates to ensure immediate coverage. These updates leverage cloud-based protection and AI-enhanced detection to rapidly identify and mitigate new malware and attack techniques. Microsoft provides troubleshooting resources for users experiencing issues with automatic updates, ensuring that security patches and intelligence updates are applied promptly. The integration of third-party materials in security intelligence updates is disclosed, maintaining transparency in the update process. Overall, the October 2025 Patch Tuesday updates represent a comprehensive effort by Microsoft to address security vulnerabilities, improve system stability, and enhance user experience across supported Windows 11 versions.
Jul 12, 2026
Microsoft began rolling out **Windows 11 preview updates** for versions **25H2 and 24H2** (including the optional non-security preview update `KB5074105` and Release Preview builds `26200.7701`/`26100.7701`) focused on functionality, performance, and reliability improvements rather than patching new security vulnerabilities. The updates emphasize expanded **AI-driven experiences** (including refinements to Copilot+ PC-related models and more natural-language assistance within Settings), along with usability changes and a simplified Windows update title format intended to reduce administrative friction in tools like **WSUS** and **Microsoft Configuration Manager**. Alongside these feature updates, Microsoft highlighted an operational security risk: **Windows Secure Boot certificates** used by most Windows devices are expected to begin expiring in **June 2026**, and organizations that do not update Certificate Authority (CA) material in time may face devices that cannot boot securely. Separately, consumer guidance circulated on bypassing Windows 11 hardware eligibility checks (notably **TPM 2.0** requirements) to upgrade “unsupported” PCs; while this may extend device usability after Windows 10 support ended, it can also undermine Microsoft’s intended security baseline and increase enterprise risk if adopted outside controlled policy.
Jun 29, 2026
Microsoft released the mandatory Windows 11 cumulative update **KB5101650** for versions **25H2** and **24H2**, alongside **KB5099414** for **23H2**, as part of its latest Patch Tuesday rollout. The update advances Windows 11 builds to **26200.8875** and **26100.8875** for 25H2 and 24H2 and includes fixes for **571 vulnerabilities**, with security-critical items such as continued **Secure Boot** certificate deployment delivered in the normal rollout phase. Microsoft said 25H2 and 24H2 receive the same package because both are based on 24H2, and no new known issues were acknowledged for the release. Beyond security fixes, KB5101650 adds and expands several user-facing and reliability improvements, including broader availability of **Point-in-time restore**, the new accessibility feature **Screen Tint**, quieter **Widgets**, and more flexible update pausing. Microsoft also addressed Bluetooth pairing and audio issues, including improvements for AirPods and call handling, while fixing problems affecting **File Explorer** performance, `explorer.exe` stability, Recycle Bin file naming, taskbar badges, networking in virtualized environments, **WSL** VPN connectivity, printing, **BITS** shutdown delays, and GIF support in the emoji panel after a switch from Tenor to **GIPHY**. The update is being distributed automatically through Windows Update and is also available as an offline `.msu` installer through the Microsoft Update Catalog.
Jul 17, 2026