The PortalFuse Microsoft Intune and Security Report Podcast

With the October 14, 2025, end-of-life for Windows 10 looming, the time to migrate to Windows 11 is now. Delaying the transition presents significant financial and security risks that go far beyond a simple IT problem and can impact your entire business.
Here's what you need to know:
The Deadline is Real: Approximately 50% of enterprise computers have not yet moved to Windows 11. The deadline for Windows 10 support is October 14, 2025.
The High Cost of Waiting: Sticking with Windows 10 will require paying for Extended Security Updates (ESU). The cost starts at $61 per device for the first year, doubles to $122 for the second year, and doubles again to $244 for the third year. For a company with 10,000 devices, waiting three years could cost over $4.27 million.
Hardware Hurdles: An estimated 13% of enterprise devices do not meet the minimum hardware requirements for Windows 11, such as TPM 2.0, and will need a full replacement. Microsoft explicitly states that installing Windows 11 on incompatible hardware is not recommended and may result in the inability to receive updates.
Industry Adoption Rates: The tech (73%) and education (77%) sectors are leading the migration. Meanwhile, industries like healthcare (41%) and financial services (45%) are lagging due to the complexities of their operations and regulatory requirements.
 
Windows 11 Migration Timeline
 
Early 2024: Windows 11 adoption in the enterprise was only around 26%.
Present Day: Enterprise adoption has now reached the 50% mark.
October 14, 2025: This is the official end-of-support date for Windows 10. The costly Extended Security Updates (ESU) program begins for any organizations that have not completed the migration.
October 2026: ESU costs double for the second year of coverage.
October 2027: For those still on Windows 10, ESU costs will double again for the third year.
 
The window for a strategic and cost-effective migration is closing. Act now to avoid unnecessary costs and security vulnerabilities.
#Windows11 #Windows11Migration #Windows11Update

Heads up, IT and Intune Admins: The July 8th, 2025, Patch Tuesday is a critical one that demands immediate strategic planning.
This isn't your average monthly update. Microsoft has signaled a universal, urgent focus on the impending Secure Boot certificate expiration. If not addressed proactively, devices across your fleet could fail to boot securely—or at all—after the June 2026 deadline. This poses a massive operational and compliance challenge for every organization.
In our latest Deep Dive episode, we cut through the noise to give you a crystal clear view of what these updates mean for your managed environments. We break down the most critical KB articles for Windows 10, 11, and Server so you can move from reactive patching to proactive remediation.
In this strategic briefing, you'll learn about:
The systemic risk of the Secure Boot certificate expiration and the looming June 2026 deadline.
Essential security updates for Windows 10 & 11, including a key fix for DHCP server stability that impacts network operations.
Non-removable updates to the Windows Recovery Environment (WinRE) and why they require meticulous testing in your deployment rings.
Actionable guidance for identifying affected endpoints and building a comprehensive remediation strategy now.
This is a foundational security issue that requires a systemic response.
Watch the full analysis to ensure your endpoint management strategy is ready for this critical deadline.

In this deep dive, we dissect the essential Windows 10 and 11 updates from the PortalFuse report for July 1st, 2025. This episode is crucial for any IT professional or system administrator managing Windows environments, as we unpack the 13 new KB articles to provide you with the operational awareness you need.
We start with Windows 11 versions 22H2 and 23H2, covering the high-impact preview update KB5060826. Learn about crucial bug fixes for excessive audit logs filling up system drives, authentication failures with Server 2025 domain controllers, and persistent RDP connection problems. We also address a persistent known issue affecting CJK characters in Chromium-based browsers, such as Microsoft Edge, and how it may impact your users.
The conversation then shifts to the future with Windows 11 version 24H2, where deep AI integration takes center stage. We explore new user experience enhancements like the "Click to Do" Copilot action and the Narrator's "Screen Curtain" for improved privacy. A major focus is the series of hardware-specific AI component updates for Qualcomm, Intel, and AMD processors, highlighting the growing need for hardware-aware deployment strategies to optimize Copilot+ PCs.
Finally, we analyze the critical, non-removable Safe OS updates for the Windows Recovery Environment (WinRE) that impact both client and server imaging. Understand how these permanent updates fundamentally change gold imaging strategies and demand a more robust, proactive validation process before deployment.
Tune in to get ahead of these changes and understand the future of Windows administration, where hardware, software, and AI are more intertwined than ever.
#Windows11 #Windows10 #AI

In this episode of Deep Dive, we cut through the noise of this week's security updates to bring you the actionable intelligence you need to protect your Windows environments. We are focusing on the Portal Fuze security report from June 25th to July 1st, 2025, specifically for Microsoft Edge. We analyze eight critical Chromium-based CVEs that impact Edge, breaking down what they are, how they could be exploited, and the exact steps you need to take to mitigate them.
This episode is a must-listen for system administrators, security professionals, and anyone managing Windows devices, especially those using enterprise tools like Microsoft Intune and Configuration Manager. We discuss how to efficiently deploy these critical patches across your entire fleet to defend against threats ranging from arbitrary code execution and memory corruption to network spoofing and elevation of privilege.
Tune in to stay ahead of the curve and transform your browser security strategy from reactive patching to a proactive, resilient defense.
 
#Edge #Windows

Here is another podcast description based on the provided captions:
This week, we're diving into the "quiet workhorses" of Windows maintenance: the non-security quality and stability updates. In our breakdown of the PortalFuse KB update report for June 24, 2025, we offer crucial insights for the Intune administrator looking to solve those annoying operational issues and enhance system reliability.
 
We explore two significant updates. First is the Windows 10 non-security update KB5061087. We discuss the critical fix for the
 
0x80010111 COM activation error that can grind business processes to a halt. Other key improvements include an update to the cURL tool, enhanced mobile operator profile management, and fixes for vanishing jump lists.
 
Next, we cover the Windows 11 configuration update KB5062324, which addresses a frustrating bug that causes Windows Update scans to hang and become unresponsive. This high-impact fix ensures update scans complete without forcing unnecessary reboots, a welcome relief for users and admins alike.
 
Listen in to see how these updates smooth out the rough edges and help you maintain a healthy, productive environment.
 
#Windows10 #Windows11 #ITAdmins #SystemStability

Stay ahead of the latest threats with the PortalFuse Weekly Security Report for the week ending June 24, 2025. This essential briefing is for IT professionals and system administrators managing Windows systems. We cut through the noise by consolidating information directly from MSI posts and Microsoft support documents to save you time.
 
This week, we focus on two new critical vulnerabilities impacting Chromium-based Microsoft products, CVE-2025-6192 and CVE-2025-6191, which were released on June 19th. We will break down these threats, including a "use after free" memory safety vulnerability and an integer overflow flaw in the V8 JavaScript engine. Learn the immediate actions required, from applying security updates to temporary mitigations like network segmentation. We also touch on an informational update to CVE-2025-33053 and clarify what it means for your patching priorities.

Welcome to The Deep Dive, your essential weekly security update for system and security professionals focusing on Microsoft Windows and Edge. This week, for June 11th to 17th, 2025, we deliver a no-fluff report on the most critical updates you need to know about right now.
 
 
We're cutting through the noise to give you a clear path to action, consolidating information from Microsoft's posts and support docs.
 
This Week's Critical Updates:
 
Microsoft Edge Vulnerabilities: We analyze two new CVEs that came via the Chromium engine.
 
 
CVE-2025-5959: A "type confusion in V8" vulnerability.
 
 
CVE-2025-5958: A "use after free in media" vulnerability.
 
Both are serious memory corruption issues that can often lead to remote code execution. The good news is that the fix is simple: just update to the latest version of Microsoft Edge.
 
 
 
Surface Hub V1 Critical Alert: A major issue is affecting Surface Hub V1 devices running Windows 10 version 22H2.
 
 
The June 2025 security update (KB5060533) is causing some devices to fail on startup, showing a "secure boot violation" error due to an invalid signature.
 
 
Microsoft has released an out-of-band update, KB5063159, which is now offered instead of the problematic one to prevent further issues.
 
For devices already impacted and unable to start, we discuss the supported fallback modes, including Guest Mode and Replacement PC Mode, that you can use as temporary workarounds. Microsoft has stated resolution steps for recovering these devices are "forthcoming".
 
 
 
Informational Windows CVEs: We cover updates for CVE-2025-33073 (SMB client elevation of privilege) and CVE-2024-28923 (Secure Boot bypass). The updates this week were purely informational, meaning no new patch is required at this time, and existing guidance has not changed.
 
 
#Microsoft #Windows #SecurityUpdate

Welcome to the PortalFuse weekly security report for June 2025. In this deep dive, we get Windows and Intune administrators up to date on the latest security issues impacting your environments. This month, we're unpacking the June 10th, 2025, Patch Tuesday release, which includes 38 new CVEs.
We cut through the noise to find the actionable intelligence you need to protect your Windows 10, Windows 11, and Windows Server systems. We're covering a range of critical vulnerabilities, including a wormable, unauthenticated Remote Code Execution (RCE) vulnerability in Windows Schannel (CVE-2025-29828), a nightmare-fuel Elevation of Privilege (EoP) vulnerability in Netlogon (CVE-2025-33070) that could allow an attacker to become a domain admin, and a critical EoP in the Windows Task Scheduler (CVE-2025-33067) that provides a direct path to full system control.
Join us as we break down the most severe threats, from RCE and EoP to Denial of Service (DoS) and a critical Secure Boot bypass. We'll tell you what needs your immediate attention and which patches you need to prioritize to keep your network secure.
#PatchTuesday #WindowsSecurity #Intune 

Cutting through the documentation of Microsoft Intune's 2505 service release, this deep dive delivers the critical updates and technical details you need for managing your endpoints. We focus on the facts, translating the latest changes into actionable insights for IT administrators working day-in and day-out with Intune.
 
Join us as we explore the evolution of Intune's device control and platform support, from firmware to the cloud.
 
In this episode, we cover:
FCI Firmware Management: A detailed look at the Device Firmware Configuration Interface (DFCI), its expansion to new hardware, the critical prerequisites, and the essential steps for deployment and device retirement to avoid locking down hardware.
 
Expanded Device Inventory: Learn about the newly collected inventory data for Apple and Android devices and the brand-new "SIM info" entity that reports on IMEI, carrier, and phone number for Windows cellular-connected devices.
 
Endpoint Privilege Management (EPM): We unpack the new "deny" elevation rule, designed to explicitly block malicious or unwanted software from running with admin rights.
 
Critical Security Updates: Understand the new compliance check to detect rooted Android Enterprise devices , and the new global exclusion profile for Defender on Linux devices managed via the MDE security settings channel.
 
Enrollment & Configuration Tweaks: We also touch on quality-of-life improvements, including custom naming templates for AOSP devices and RBAC permission changes for enrollment limit policies.
#MicrosoftIntune #Intune #EndpointManagement #EPM #AndroidEnterprise #DFCI #Cybersecurity #MDM

Portalfuse Weekly KB Report: June 3, 2025 - Key Windows AI, Copilot & Admin Updates
Get the essential technical breakdown of Microsoft Windows updates from June 3rd, 2025, in this Portalfuse Weekly KB Report. Aimed at Intune administrators, we cover vital changes for Windows 10 and Windows 11 (24H2), including new AI features, Copilot enhancements, and key admin controls.
Discover critical fixes like the BitLocker BSOD resolution, new Windows 11 Energy Saver management via Microsoft Intune, and updates to AI components for Copilot+ PCs. We also touch on known issues affecting Chromium browsers like Microsoft Edge and an important update for Windows Recovery Environment (WinRE) stability.
 
Quick Timeline:
00:00 - Intro
00:38 - Windows 10 (22H2 Preview): Calendar & rendering fixes, Chromium/Edge font issue.
03:15 - Windows 11 (24H2 Preview): New AI text actions, Copilot updates, Energy Saver management via Intune, BitLocker BSOD fix.
06:31 - AI Updates for Windows 11 24H2 (Copilot+ PCs): Image processing & local LLM enhancements.
08:09 - Dynamic Updates (Win 11 24H2 & Server 2025): WinRE stability fix, improved setup binaries.
09:55 - Key Takeaways for IT Admins.
#MicrosoftWindows #Windows11 #Windows10 #AI #Copilot #MicrosoftEdge #TechUpdate #Podcast #ITAdmins #Intune #WindowsUpdate