Windows 10's latest patch keeps your Secure Boot certificates on track

PCWorld reports that Microsoft's Windows 10 patch KB5120249 focuses on security rather than new features, addressing outdated Secure Boot certificates and fixing critical vulnerabilities in versions 22H2 and 21H2. The roughly 1GB update also resolves File History errors, improves Microsoft Defender, and includes fixes for the Windows Malicious Software Removal Tool. Since standard Windows 10 support ended in October 2025, users must enroll in the ESU program to receive continued protection through 2027. Earlier this week, Microsoft released KB5120249, a critical security update for Windows 10 versions 22H2 and 21H2, as well as Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021. This is the next entry in Windows 10's Extended Security Updates program, so don't expect any new features. Rather, this patch includes fixes for various security vulnerabilities still present in Windows 10.