Loading story…
A faulty update to Dell SupportAssist Remediation version 5.5.16.0 has caused repeated Blue Screen of Death crashes and reboot loops on some Dell and Alienware laptops, with affected systems reportedly failing about every 30 minutes and showing the CRITICAL_PROCESS_DIED stop error. User reports tied the issue to updates delivered through Dell Command Update or SupportAssist, and crash dump analysis identified DellSupportAssistRemedationService.exe as the process linked to bugcheck 0xEF. Systems cited in reports include the XPS 15 9530, Dell Pro Plus 14, and **Dell Precision 3571`, and users said disabling or uninstalling SupportAssist Remediation and the Dell SupportAssist OS Recovery Plugin stopped the crashes.
Dell Engineering later acknowledged that SupportAssist Remediation 5.5.16.0 and Alienware SupportAssist Remediation 5.5.16.0 can trigger the instability and said it is working on a fix, while advising customers to manually remove the remediation service as an interim measure even though that may temporarily remove Dell OS Recovery repair points. The incident surfaced as Microsoft announced Cloud-Initiated Driver Recovery (CIDR), a new Windows Update capability that will let Microsoft remotely roll back faulty drivers to a known-good version without user or OEM action. CIDR is limited to drivers distributed through Windows Update and is being tested now, with broader automatic support in the Hardware Dev Center publishing workflow planned for September 2026.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
Microsoft said Cloud-Initiated Driver Recovery is expected to become automatically integrated into the Hardware Dev Center publishing process in September 2026 after the testing period concludes.
Dell Engineering confirmed that SupportAssist Remediation 5.5.16.0 and Alienware SupportAssist Remediation 5.5.16.0 can trigger BSOD loops, said it was working on a fix, and advised manually uninstalling the remediation service as an interim measure.
Affected customers reported that disabling the Dell SupportAssist Remediation service or uninstalling SupportAssist Remediation and the OS Recovery Plugin stopped the recurring crashes.
Affected users analyzed crash dumps with WinDbg and identified bugcheck 0xEF (CRITICAL_PROCESS_DIED), pointing to DellSupportAssistRemedationService.exe as the faulting process behind the reboot loops.
Reports started appearing on Dell's support forums that updated Dell and Alienware laptops were crashing roughly every 30 minutes with CRITICAL_PROCESS_DIED errors after installing SupportAssist-related updates.
Microsoft introduced Cloud-Initiated Driver Recovery, a Windows Update capability that can remotely roll back problematic drivers to a known-good version without user or OEM intervention. The company said manual validation and testing would run from May through August 2026.
Dell SupportAssist Remediation version 5.5.16.0 and its OS Recovery Plugin were released, later identified as the versions associated with repeated BSOD and reboot-loop issues on some Dell and Alienware systems.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
7 references tracked. Mallory keeps watching after this page renders.
bleepingcomputer.com
Open sourcecybersecuritynews.com
Open sourceghacks.net
Open sourcearstechnica.com
Open sourcetomshardware.com
Open sourcetomshardware.com
Open sourcetechcommunity.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Some Dell PCs, including the **XPS 15 9530**, began entering repeated **BSOD** and reboot loops after Dell software updates installed **SupportAssist Remediation 5.5.16.0** and related OS recovery components. User reports and crash analysis tied the failures to Windows bugcheck `0xEF` (**CRITICAL_PROCESS_DIED**), with Reliability Monitor, Windows Error Reporting, and WinDbg identifying the critical process as `DellSupportAss` and referencing `DellSupportAssistRemedationService.exe` in the Dell SARemediation agent path. Affected systems also commonly had **SupportAssistAgent**, **DellTechHub**, and **Dell Command | Update 5.7.0** present. Users reported crashes roughly every 30 minutes, often accompanied by critical kernel power events, and said the instability stopped after disabling or uninstalling **Dell SupportAssist Remediation** and, in some cases, removing SupportAssist and its OS recovery plugin entirely. Multiple forum posts linked the issue to recent Dell updates affecting BIOS, dock, and related components, while outside reporting said Windows 11 itself did not appear to be the root cause. Dell had not published a confirmed fix or formal response in the cited reports.
Jun 29, 2026
Microsoft has placed a safeguard hold on the Windows 11 security update `KB5101650` for some Dell systems after confirming that affected devices may unexpectedly shut down, run hotter, drain battery faster, and suffer degraded performance. The issue impacts a limited number of Dell PCs running Windows 11 `24H2` and `25H2`, and was first identified by Dell during internal testing before Microsoft publicly acknowledged the problem. Microsoft said the failures stem from an incompatibility introduced by the June 23 preview update `KB5095093`, specifically between the new Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework (IPF) Processor Participant driver. The company is working with Dell on a permanent fix expected in the coming days, and in the meantime affected devices will not be offered the blocked security update.
Jul 20, 2026
Microsoft released the June cumulative update `KB5093998` for Windows 11 23H2 with security fixes, broader Secure Boot certificate rollout support, and a new Group Policy/MDM option to limit Secure Boot service data sent to Microsoft. The update also fixes a known issue that could force some devices into **BitLocker Recovery** after boot file updates, while CERT/CC and Microsoft separately published advisories on a Secure Boot bypass affecting Microsoft-signed UEFI shim bootloaders, tracked as `CVE-2026-44815`. At the same time, Microsoft warned that some PCs upgraded from Windows 10 21H2/22H2 or Windows 11 23H2 to Windows 11 24H2 or 25H2 may fail to install the June 2026 cumulative updates, showing errors `0x80073712` or `0x800f0993` because of package and component store issues. Microsoft said an automatic fix is rolling out for unmanaged enterprise and Home devices after restart, while already affected systems may require removing a problematic package with DISM or performing an in-place upgrade; separate reporting also said recent HP BIOS updates and Dell SupportAssist software caused BitLocker loops and BSODs that were initially blamed on Windows but traced to OEM firmware and utilities.
Jun 29, 2026