Windows 10 KB5078885 ESU out with Secure Boot 2023, replacing expiring Secure Boot certificates from 2011. But it's a staged roll out.

Last fall, Microsoft announced that individuals who wanted to keep using Windows 10 past its official end-of-support date could do so by opting into the company’s Extended Security Update (ESU) ...

Fixes a flaw that impacted the Windows reset and reinstall tools. The patch affects certain versions of Windows 10 and Windows 11. To install the patch, head to Windows Update under Settings. Get more ...

How to check your Windows PC for expiring security certificates - a big one is ending soon ...