Cyber Security News

Microsoft Launches Extended Security Update Program for Windows 10 Users

Microsoft released its latest security update, KB5075912, for Windows 10 on February 10, 2026, providing critical protections for users enrolled in the Extended Security Updates (ESU) program.

This update addresses urgent security vulnerabilities and system issues. At the same time, Windows 10 users transition to Windows 11 following the operating system’s end of support on October 14, 2025.

The Extended Security Updates program enables Windows 10 users to continue receiving critical security updates through an annual subscription service after official support ends.

The program runs through October 13, 2026, providing one year of additional security coverage for devices running Windows 10 version 22H2.

ESU enrollment does not include feature improvements, product enhancements, or technical support, only security patches as defined by the Microsoft Security Response Center.

The February update addresses a critical concern: Secure Boot certificates originally issued in 2011 are set to expire starting in June 2026.

These certificates ensure that devices boot only with trusted software, protecting against boot-level security threats.

Without timely updates, certain personal and business devices may lose the ability to boot securely. Microsoft recommends reviewing guidance and updating certificates in advance to avoid disruption.

Key Fixes in KB5075912

This security update resolves several critical issues affecting Windows 10 systems.

It fixes a problem that prevents Secure Launch-capable PCs with Virtual Secure Mode enabled from shutting down or hibernating; instead, these devices restart.

ComponentIssue/Fix Description
OS Builds19045.6937 (version 22H2) and 19044.6937 (version 21H2) ​
Release DateFebruary 10, 2026 ​
FontsChinese fonts updated to meet GB18030-2022A compliance
OS SecurityFixed shutdown/hibernation bug on Secure Launch PCs with Virtual Secure Mode enabled
FoldersFixed File Explorer folder renaming issue with desktop.ini files where LocalizedResourceName was ignored
GraphicsFixed stability issues affecting certain GPU configurations ​
Secure BootPhased rollout of new Secure Boot certificates with targeting data ​

The update also addresses folder-renaming issues in File Explorer where custom folder names weren’t displayed correctly, as well as stability problems affecting certain graphics processing units.

It includes changes to the Chinese font to comply with GB18030-2022A standards. KB5075912 introduces a phased rollout system for new Secure Boot certificates.

The update includes targeting data that identifies devices and their capability to receive new certificates, with distribution occurring only after sufficient successful update signals are confirmed.

This gradual approach ensures safer deployment across millions of Windows 10 devices enrolled in ESU.

The servicing stack update KB5077456 included with this release contains enhanced logic to verify Azure-hosted devices using an updated certificate chain for validation.

Microsoft strongly recommends installing this latest servicing stack update before applying additional updates to ensure seamless future installations.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago