Skip to content

Windows Update

Microsoft's service for delivering patches, drivers, firmware and Defender security intelligence updates to Windows devices.

Known aliases

  • TrustedInstaller.exe
  • Windows Update services

Current stories

securityConfirmed4 publishers

Expiring Windows Update certificates will cut unsupported devices off from updates in 2027

Microsoft says Windows devices on unsupported versions will lose all Windows Update access when update certificates expire on May 17 and June 19, 2027. Every supported release below Windows 11 25H2, servers included, needs a specific monthly update installed first to stay connected.

Perspective Coverage

4 publishers
Builder
Builder 6%
Operator
Operator 86%
Investor
Investor 8%

Reality

Evidence72
Adoption
Not scored
Hype gap+6
Incentives
Not scored
Confidence76
securityOne report1 publisher

Windows devices missing replacement certificates lose Windows Update from May 17 or June 19, 2027

Microsoft says Windows Update server certificates expire May 17 or June 19, 2027, depending on version. Devices without the replacements lose security fixes, so admins need to find machines that have fallen behind.

Reality

Evidence55
Adoption
Not scored
Hype gap−10
Incentives
Not scored
Confidence60
buildOne report1 publisher

Windows 11's Cloud Rebuild moves the recovery image off the device and onto Windows Update

Build 26220.9343 promoted Cloud Rebuild to the Beta channel on September 9, and a rebuild now reformats the system disk and fetches Windows plus drivers from Windows Update while still needing someone at the keyboard.

Publishers:dev.to

Reality

Evidence42
Adoption15
Hype gap+30
Incentives58
Confidence38
securityOne report1 publisher

REVSTEALER-linked module LockAppHost disables 18 Windows update and malware-removal mechanisms before mining

Elastic documented four programs that stay in the user profile after the stealer wipes itself. The credential rotation that closes the ticket does not restore the update services or clear the Defender exclusions.

Reality

Evidence60
Adoption45
Hype gap−10
Incentives70
Confidence58
productOne report1 publisher

Lenovo pulled the bad Legion Go BIOS. It still won't say who pays for the bricks.

The company's only free-repair language sits in a forum post from an account with no history, while its official statement stops at holding down the power button.

Publishers:theverge.com

Reality

Evidence64
Adoption32
Hype gap−12
Incentives68
Confidence56
buildOne report1 publisher

Before you restart that Windows service, find out whether StartType survived the update

A five-move walkthrough of a stopped SQL Server argues for evidence before action. The restart that clears the alert also rotates the log that would have explained the repeat.

Publishers:dev.to

Reality

Evidence34
Adoption15
Hype gap+14
Incentives24
Confidence42