The "Unstoppable" PC: Microsoft's Latest Security Update Refuses to Let Windows 10 Expire

Feb 3
2 min read

Key Findings

Microsoft's latest cumulative updates for Windows 11 have caused technical issues, including devices failing to enter sleep mode or shutdown correctly, often resulting in involuntary reboots.
The problems have also extended to Windows 10 systems with Virtualization-Based Security (VBS/VSM) enabled.
Microsoft has acknowledged the defects and is working on a comprehensive resolution for both Windows 10 and 11.
As an interim mitigation, affected users are advised to manually terminate their sessions using the command-line interface.

Background

Virtual Secure Mode (VSM) is a foundational security architecture in Windows, utilizing hardware virtualization to create an isolated and fortified memory environment, or "secure kernel," distinct from the primary operating system. This segregation ensures that even in the event of severe malware infiltration, the protected enclave remains inaccessible to malicious actors.

Microsoft utilizes VSM to safeguard sensitive credentials, cryptographic keys, and security tokens from kernel-level exploits and "pass-the-hash" attacks, enabling advanced protections such as Credential Guard and Device Guard within Enterprise iterations of Windows 10 and 11.

Shutdown Failures

The corporation reports that Windows 10 version 22H2, alongside the LTSC 2021 and 2019 editions, will experience these shutdown failures if the KB5078131 or KB5073724 updates are installed while VSM is enabled.

As an interim mitigation, Microsoft advises affected users to manually terminate their sessions via the command-line interface using the directive `shutdown /s /t 0`.

Impact on Standard Users

The majority of standard Windows 10 users likely do not have Virtual Secure Mode active, and thus their routine shutdown procedures should remain unimpeded. However, should an individual find their system afflicted, the aforementioned command-line protocol remains the most effective recourse.

Comprehensive Resolution

A comprehensive resolution is currently being engineered to rectify this defect across both Windows 10 and 11 ecosystems.

Sources

https://securityonline.info/the-unstoppable-pc-why-microsofts-latest-security-update-is-refusing-to-let-windows-10-die/
https://securityonline.info/admins-only-microsofts-new-windows-11-update-quietly-locks-down-storage-settings/