Hackers News Hackers News
  • CyberSecurity News
  • Threats
  • Attacks
  • Vulnerabilities
  • Breaches
  • Comparisons

Social Media

Hackers News Hackers News
  • CyberSecurity News
  • Threats
  • Attacks
  • Vulnerabilities
  • Breaches
  • Comparisons
Search the Site
Popular Searches:
technology Amazon AI
Recent Posts
Trellix Source Code Breach: Hackers Access Repository
May 2, 2026
Hackers Exploit cPanel Flaw to Breach Government Military
May 2, 2026
Exim Mail Server Vulnerabilities Lead to Crash via DNS Data
May 2, 2026
Home/CyberSecurity News/Microsoft Investigates Windows 11 25H2 Investigating Boot
CyberSecurity News

Microsoft Investigates Windows 11 25H2 Investigating Boot

Microsoft has launched an urgent investigation into severe stability issues plaguing the January 2026 security update for Windows 11, following reports that the patch is causing critical boot...

Sarah simpson
Sarah simpson
January 26, 2026 2 Min Read
0 0

Microsoft has launched an urgent investigation into severe stability issues plaguing the January 2026 security update for Windows 11, following reports that the patch is causing critical boot failures on physical devices.

The update, identified as KB5074109, was intended to bring security enhancements to Windows 11 versions 25H2 and 24H2 but has instead triggered a wave of “UNMOUNTABLE_BOOT_VOLUME” errors that render affected systems unusable.

Critical Boot Failures Confirmed

The primary issue under investigation involves devices entering a boot loop or displaying a “Black Screen of Death” immediately after applying the January 13, 2026, Patch Tuesday update.

Affected users report seeing a stop code 0xED (UNMOUNTABLE_BOOT_VOLUME) accompanied by the message: “Your device ran into a problem and needs a restart.”.

Microsoft has acknowledged the problem, stating they have received “a limited number of reports” where devices cannot complete startup.

Notably, this regression appears to affect only physical hardware, with virtual machine environments currently showing no signs of the defect, Askwoody observed first.

For administrators and users struck by this bug, the operating system becomes inaccessible, requiring manual intervention via the Windows Recovery Environment (WinRE) to uninstall the faulty package.

While the boot failure represents the most severe regression, KB5074109 is also responsible for a broader array of system-breaking bugs. Reports confirm that users who successfully boot are encountering widespread stability problems, including total system lockups and graphics driver conflicts.

According to user documentation, the update has introduced significant regressions in the graphics stack, leading to freezes in GPU-intensive applications. Specific incidents have been recorded with BforArtists 5.0 (a Blender fork), where switching viewport shading modes causes the system to hang indefinitely without generating a blue screen.

These “silent” lockups are attributed to conflicts between the new kernel changes and existing DirectX/GPU drivers, with Nvidia and AMD systems also suffering from black screens where the Windows UI fails to render correctly.

The fallout from KB5074109 extends to enterprise connectivity and productivity apps. Microsoft confirmed that the update broke credential prompts for Azure Virtual Desktop (AVD) and Windows 365, preventing remote connections, a critical flaw that was subsequently patched via the out-of-band update KB5077744 on January 17.

Furthermore, Outlook Classic users have reported the application freezing on launch or failing to sync POP/SMTP accounts due to lingering processes.

Mitigation Strategy

For users experiencing the UNMOUNTABLE_BOOT_VOLUME error, the only current recourse is to enter WinRE and uninstall the latest quality update. For those with bootable but unstable systems, Microsoft and security experts recommend pausing updates or rolling back KB5074109 via:

  • Settings > Windows Update > Update history > Uninstall updates.

Enterprise administrators are advised to deploy Known Issue Rollback (KIR) policies where available, while consumers are urged to delay installation until Microsoft releases a comprehensive fix for version 25H2.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.

Tags:

PatchSecurity

Share Article

Sarah simpson

Sarah simpson

Sarah is a cybersecurity journalist specializing in threat intelligence and malware analysis. With over 8 years of experience covering APT groups, zero-day exploits, and advanced persistent threats, Sarah brings deep technical expertise to breaking cybersecurity news. Previously, she worked as a security researcher at leading threat intelligence firms, where she analyzed malware samples and tracked cybercriminal operations. Sarah holds a Master's degree in Computer Science with a focus on cybersecurity and is a regular contributor to major security conferences.

Previous Post

Hackers Impersonate Marriott in New ‘rn Typo Trick

Next Post

Attackers Exploit Mjobtime App Flaw in Targeting Construction

No Comment! Be the first one.

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Popular Posts
cPanelSniper PoC Exploit for cPanel Vulner Disclosed Vulnerability
May 2, 2026
EtherRAT Targets Enterprise Admins with SEO Poison
May 1, 2026
New Spyware Platform: Rebrand & Resell Android Lets Buyers
May 1, 2026
Top Authors
Marcus Rodriguez
Marcus Rodriguez
Sarah simpson
Sarah simpson
Emy Elsamnoudy
Emy Elsamnoudy
Let's Connect
156k
2.25m
285k

Related Posts

Jennifer sherman
By Jennifer sherman
Threats

GlassWorm Attacks macOS via Malicious VS Code…

January 1, 2026
Emy Elsamnoudy
By Emy Elsamnoudy
Attacks

ClickFix Attack Hides Malicious Code via Stegan Security

January 1, 2026
Sarah simpson
By Sarah simpson
Vulnerabilities

MongoBleed Detector Tool Detects Critical MongoDB CVE-

January 1, 2026
Emy Elsamnoudy
By Emy Elsamnoudy
Breaches

Conti Ransomware Gang Leaders & Infrastructure Exposed

January 1, 2026
Hackers News Hackers News
  • [email protected]

Quick Links

  • Contact Us
  • Privacy Policy
  • Terms of service

Categories

Attacks
Breaches
Comparisons
CyberSecurity News
Threats
Vulnerabilities

Let's keep in touch

receive fresh updates and breaking cyber news every day and week!

All Rights Reserved by HackersRadar ©2026

Follow Us