A Critical Deadline Is Approaching for Windows and Linux Security (opens original article in a new tab)

Windows and Linux users must update cryptographic keys by June 24 to maintain protection against UEFI bootkits, as expired certificates will leave systems vulnerable to firmware-based malware.

• Three cryptographic certificates protecting Windows and Linux systems against UEFI bootkits will expire on June 24, requiring updates to maintain security.
• Secure Boot relies on Microsoft-signed certificates to verify firmware trust, but vulnerabilities like LogoFail have necessitated replacement of outdated signatures.
• Failure to update Secure Boot keys leaves systems vulnerable to UEFI-based malware, which can persist through OS reinstallation and evade detection.