{"id":9948,"date":"2026-01-17T10:04:16","date_gmt":"2026-01-17T10:04:16","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/01\/17\/windows-11-pcs-fail-to-shut-down-after-january-security-update\/"},"modified":"2026-01-17T10:04:16","modified_gmt":"2026-01-17T10:04:16","slug":"windows-11-pcs-fail-to-shut-down-after-january-security-update","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/01\/17\/windows-11-pcs-fail-to-shut-down-after-january-security-update\/","title":{"rendered":"Windows 11 PCs Fail to Shut Down After January Security Update"},"content":{"rendered":"<p>    Windows 11 PCs Fail to Shut Down After January Security Update<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Microsoft\u2019s January 13, 2026, <a href=\"https:\/\/cybersecuritynews.com\/microsoft-patch-tuesday-january-2026\/\" target=\"_blank\" rel=\"noreferrer noopener\">security update<\/a> for Windows 11 has triggered a frustrating bug: affected PCs refuse to shut down or hibernate, instead restarting.<\/p>\n<p>The issue is caused by KB5073455, which targets OS Build 22621.6491 on Windows 11 version 23H2. It was first reported on January 15 and arises from interference with Secure Launch, a virtualization-based security (VBS) feature designed to protect boot processes from firmware threats such as rootkits.<\/p>\n<p>Secure Launch, part of Windows\u2019 System Guard suite, verifies the firmware environment during startup using hypervisor-protected code integrity.<\/p>\n<p>Isolating the core root of trust measurements prevents persistent malware from tampering with the pre-OS environment. Ironically, this month\u2019s patch, intended to bolster defenses, disrupts the feature, blocking proper power-off states on compatible hardware.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-affected-systems-and-scope\"><strong>Affected Systems and Scope<\/strong><\/h2>\n<p>The glitch affects only the Enterprise and IoT editions of Windows 11 23H2, sparing the consumer Home and Pro variants. No server platforms, such as Windows Server, face disruptions.<\/p>\n<p>Microsoft <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/release-health\/status-windows-11-23h2#devices-with-secure-launch-might-fail-to-shut-down-or-hibernate\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">confirmed<\/a> the problem via its support portal, last updated January 15 at 19:01 PT. Systems must have Secure Launch enabled, a common setup in high-security enterprise deployments that rely on VBS to meet compliance standards such as NIST or <a href=\"https:\/\/cybersecuritynews.com\/what-is-zero-trust\/\" target=\"_blank\" rel=\"noreferrer noopener\">zero-trust<\/a> architectures.<\/p>\n<p>Admins in regulated sectors, including finance and government, report the issue across fleets, raising concerns over power management reliability.<\/p>\n<p>While not a vulnerability itself, the bug exposes risks: devices stuck in restart loops drain batteries faster, potentially leading to data loss or unattended uptime that amplifies exposure to unpatched threats.<\/p>\n<p>Microsoft offers a temporary fix for shutdowns via Command Prompt: launch <em>cmd<\/em> from the Search bar and run <em>shutdown \/s \/t 0<\/em>. This forces an immediate power-off, bypassing the GUI failure. Hibernation lacks a workaround; users must save work and opt for full shutdowns to prevent unexpected power loss.<\/p>\n<p>The company promises a fix in an upcoming update and urges IT teams to monitor Windows Update channels. In the interim, disabling Secure Launch via <a href=\"https:\/\/cybersecuritynews.com\/active-directory-group-policy-bypassed\/\" target=\"_blank\" rel=\"noreferrer noopener\">Group Policy<\/a> (<em>Computer Configuration &gt; Administrative Templates &gt; System &gt; Device Guard) restores functionality but weakens boot integrity\u2014a trade-off for threat hunters weighing the risks of <\/em>firmware attack vectors.<\/p>\n<p>This incident underscores the double-edged sword of monthly Patch Tuesday rollouts. As enterprises patch for zero-days, such regressions highlight the need for staged testing, especially on security-hardened configs.<\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 94%,rgb(169,184,195) 100%)\"><strong>Follow us on <a href=\"https:\/\/news.google.com\/publications\/CAAqMggKIixDQklTR3dnTWFoY0tGV041WW1WeWMyVmpkWEpwZEhsdVpYZHpMbU52YlNnQVAB?hl=en-IN&amp;gl=IN&amp;ceid=IN:en\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google News<\/a>, <a href=\"https:\/\/www.linkedin.com\/company\/cybersecurity-news\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LinkedIn<\/a>, and <a href=\"https:\/\/x.com\/cyber_press_org\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">X<\/a> for daily cybersecurity updates. <a href=\"https:\/\/cybersecuritynews.com\/contact-us\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Contact us<\/a> to feature your stories.<\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/windows-11-pcs-fail-to-shut-down\/\">Windows 11 PCs Fail to Shut Down After January Security Update<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Guru Baran<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/windows-11-pcs-fail-to-shut-down\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows 11 PCs Fail to Shut Down After January Security Update Microsoft\u2019s January 13, 2026, security update for Windows 11 has triggered a frustrating bug: affected PCs refuse to shut down or hibernate, instead restarting. The issue is caused by KB5073455, which targets OS Build 22621.6491 on Windows 11 version 23H2. It was first reported [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,395],"tags":[130],"class_list":["post-9948","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-windows","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9948"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=9948"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9948\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=9948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=9948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=9948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}