Help Desk Blogger

"Your iPhone is up to date," Settings says. Yet the last update you remember landed in spring. If that phone is an iPhone 8, an X or older, you read it right: Apple's iPhone security updates for those models stopped after 11 May 2026, while newer phones were patched again on 26 October. Before you shop or panic, check one date: the day Apple released your version.

How do I check when my iPhone was last patched?

Read your iOS version in Settings, find that exact number on Apple's security releases page, and note the date beside it; that date, not the "up to date" message, tells you whether fixes are still coming.

1. Read the version. Open Settings, General, About and note the iOS Version line.
2. Find its date. Search that number on Apple's security releases page, which lists each release's date and models.
3. Count the days. Count from that date to today.

Step three is the sum to remember: "up to date" only means no newer build exists for your model. In January 2026 an iPhone X owner on Apple's Support Community asked whether the phone was still safe for banking. Nobody could name an end date.

Is the iPhone 8 still getting security updates?

Not since 11 May 2026: Apple's last release for the iPhone 8, 8 Plus and X was version 16.7.16, and that branch sat out every later wave of fixes that reached newer models.

Apple's list shows the branch's 2026 rhythm: 26 January, 2 February, 11 March and 11 May, then silence. The May release fixed a notification bug (CVE-2026-28950) with no reported attacks. The iPhone 6s, 7 and first SE, on version 15.8.8, stopped the same day.

Then, on 26 October, version 18.7.11 for the XS and XR fixed CVE-2026-86950, a CoreGraphics bug Apple says "may have been exploited in an extremely sophisticated attack" on versions before iOS 27. Nothing shipped for iOS 16 or 15, and Apple has not said whether they carry the bug. That unknown is the real risk for an iPhone X owner, more than any one flaw, really.

Apple never announces the end. Microsoft prints its dates, as with Office 2021's end of support and the Windows 11 24H2 cut-off; Apple leaves you to infer it from a gap, and we think owners should do that sum now.

Four figures from Apple's security releases page, read 30 October 2026, show who is covered and at what cost.

The XS card deserves a second look: missing a major iOS version is not missing fixes. The patch stream is what stopped for the iPhone 8 and X.

Which models still get iPhone security updates?

Every iPhone from the XS and XR onward got a security release on 26 October 2026, while the iPhone 8, 8 Plus, X, 6s, 7 and first-generation SE have had nothing since 11 May.

Find your model and read across; versions are as of October 2026.

The middle rows split on one date: the release date, not the version number, is what to check.

Worked example: an iPhone X shows version 16.7.16 on 30 October 2026. Assume 11 May is its latest release and the branch's longest earlier 2026 gap is its normal ceiling. 11 May to 30 October is 20 + 30 + 31 + 31 + 30 + 30 = 172 days. 11 March to 11 May is 20 + 30 + 11 = 61 days. 172 divided by 61 is 2.8. Past twice, we treat the phone as unsupported for banking and passwords.

Does the iPhone 11 get iOS 27?

Yes: Apple released iOS 27 on 14 September 2026 for the iPhone 11 and later, the same floor as iOS 26, so a leak claiming four older models would be cut turned out to be wrong.

MacTrast reported on 4 June 2026 that a leaker, Instant Digital, expected iOS 27 to drop the iPhone 11, 11 Pro, 11 Pro Max and second SE. Apple's 27.2 notes say "iPhone 11 and later", and we would call selling an iPhone 11 on that rumour a mistake. It lacks only Apple Intelligence, which those notes limit to the iPhone 15 Pro and later.

• No way back. Apple says installed updates cannot be downgraded, so stay on 26.7.x until you want iOS 27.
• Bank apps follow the bank. The App Store listing's Compatibility line shows each app's minimum iOS.
• Nothing breaks on a date. Unlike Wemo plugs after Belkin's shutdown, an old iPhone keeps working unpatched.

So did they stop in May? For the iPhone 8, X, 7 and 6s, yes, as far as Apple's own list shows; for the XS and later, no. The decision is whether that old phone still deserves your passwords. This week, read your version and count the days. Past twice the branch's longest 2026 gap, move banking and password apps to a supported phone. If Apple's list shows a newer build for your model, recount before you buy.

Windows Security shows a green tick beside Secure Boot, yet every headline says a certificate ran out. Both can be true, and that gap is the whole problem. Microsoft's Windows Production PCA 2011 expired on 19 October 2026, and the secure boot certificate that replaces it may or may not be on your PC. You can find out in about a minute, in three places, checked in order.

How do I check if my PC has the Secure Boot certificate update?

Run three checks in order and stop at the first clear answer: the exact wording in Windows Security, Event 1808 or 1801 in Event Viewer, then one registry value read in PowerShell.

1. Windows Security. Open Device security, then Secure Boot, and read the sentence under the badge. On Microsoft's status page, "all required certificate updates have been applied" means no action, while "older boot trust configuration" means install updates and restart.
2. Event Viewer. In the System log, filter for source TPM-WMI. Event 1808, "This device has updated Secure Boot CA/keys," is the all-clear. Event 1801 means certificates updated but not yet applied to firmware, per Microsoft's events list.
3. PowerShell. In an administrator window, run Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot\Servicing | Select-Object UEFICA2023Status, UEFICA2023Error. Microsoft's registry page treats Updated with an error of 0 as finished; NotStarted or InProgress means not yet.

That is the one-minute check to run on your own PC tonight, and step one alone is not enough. Malwarebytes wrote on 28 May 2026 that a green checkmark alone does not confirm the new certificates were applied. An asker on Microsoft's Q&A site wanted to know how to confirm the fix had worked, which says plenty about the signal, or maybe just how many people share the question.

Will my PC still boot now the 2011 certificates have expired?

Yes: Microsoft says devices without the 2023 certificates continue to start and operate normally, and ordinary Windows updates still install, so an expired date alone does not lock you out.

What stops is the early-boot side. Microsoft states that such a PC can no longer receive new Boot Manager updates, Secure Boot database and revocation-list updates, or fixes for newly found boot-level flaws. Our reading: maintenance, not emergency, but with no natural reminder, so it gets skipped. The fix arrives through Windows Update, so confirm your build with the Windows 11 24H2 winver check, and if updates keep failing, start with the September Windows 11 update problems.

Worked example: a Windows 11 PC with Secure Boot on has never logged Event 1808, and still holds its factory 2011 certificates. Today is 25 October 2026. The key-exchange certificate expired on 24 June 2026, so 24 June to 24 October is 30 + 31 + 31 + 30 = 122 days, plus one to reach today: 123 days. That PC has booted through 123 days of an expired certificate without failing, so expiry alone is not the risk; the missing 2023 certificates are.

Four numbers frame the urgency, and the retry schedule comes from Microsoft's troubleshooting guide.

The retry cadence makes patience a fair first move: a PC showing Event 1801 may simply be mid-way.

What does each result mean, and what should I do?

Find your row and read across: 1808 means finished, 1801 means restart and recheck, errors 1795 and 1796 point at the firmware, and 1032 means pause BitLocker first.

Only the error rows need a human: Microsoft says to contact the device maker for 1795, and 1032 sits with your BitLocker setup.

Does the Secure Boot update trigger BitLocker recovery?

It can: Microsoft logs Event 1032 when your BitLocker setup would trigger recovery mode if the update were applied, and its fix is to suspend BitLocker for two restarts, then turn it back on.

Microsoft also notes a device may ask for the recovery key once after the update; enter it and check for firmware updates. Windows Latest reported on 26 May 2026 that HP had acknowledged a BIOS update leaving some commercial PCs in a BitLocker recovery loop, with the 2023 certificates failing to install meanwhile. Our call: treat every firmware update on a BitLocker PC as a recovery-key moment, and store the key somewhere that is not that PC.

One poster on Microsoft's Q&A forum described a status stuck at InProgress with events 1796 and 1801 repeating, an update that keeps retrying and never lands.

• Secure Boot off. A PC in legacy BIOS or CSM mode, Malwarebytes reports, sits outside this update.
• Reset to defaults. Microsoft says avoid it unless the maker's defaults include the 2023 certificates.
• Dismissed warnings. Dismiss installs nothing, and Microsoft calls it not recommended.
• Windows 10. Microsoft's expiry page lists Windows 10 22H2, so run the same three checks; patch timing is in the Windows 10 ESU extension to October 2027.

The decision is whether to wait for Windows or step in yourself, and for most PCs it is wait. Tonight, run the three checks. At Event 1808, close the laptop. Otherwise install updates, restart, recheck tomorrow, and touch firmware only once your recovery key is saved off the PC.

The Wemo app spins, then tells you the plug is offline. Alexa says the device is not responding. You reboot the router and nothing changes. If your Wemo stopped working this year, stop troubleshooting the Wi-Fi and leave the reset button alone: the fault is almost certainly Belkin's, and one wrong press can make it permanent.

Why did my Wemo plug stop working?

Your Wemo plug stopped responding because Belkin ended Wemo cloud services and app support on 31 January 2026, which also cut remote access and the Alexa and Google Assistant integrations, so your router is not the problem.

That check saves an evening. A dead app or a "device not responding" reply from Alexa is the shutdown working as designed, and no router setting brings either back. The useful question is which Wemo you own: Belkin's end-of-support table sorts its listed models into three fates, and the label's model number tells you yours.

Does Wemo still work with Apple HomeKit?

Yes, if it was already set up: Belkin says HomeKit-configured devices "may continue to function locally via HomeKit", but after 31 January 2026 you can no longer set up a Wemo device with Apple HomeKit at all.

That second half is the trap. A factory reset wipes the pairing, and with setup gone, the plug can never rejoin your Home app. Generic smart-plug advice says reset first. For a Wemo in Apple Home it is the single worst thing you can do. My read, and it is opinion: "may continue" is not a promise. If a future iOS update breaks these plugs, nobody at Belkin will fix them. Treat a surviving HomeKit Wemo as borrowed time, not a reason to buy more.

Belkin is harsher than most. Microsoft at least sold a lifeline when Windows 10 ended, and you can still check whether your PC is covered by Windows 10's extended security updates; Wemo owners get none. The closer parallel is Britain's landline switch-off, which will leave some burglar alarms and telecare devices dead: hardware that works perfectly until the service behind it disappears.

Four numbers decide your next move. The model count is Belkin's; the applet figure comes from GearBrain's January 2026 report that existing Wemo applets stopped running; the other two are our own arithmetic, counted to publication day.

The cost of keeping a paired plug is the figure that should change behaviour. A Wemo in Apple Home needs no Belkin server or subscription to switch, so replacing it early gains nothing. The only thing that can turn it into e-waste is you, holding the reset button down for a few seconds.

Wemo stopped working: what to do with yours

What you do depends on one check, the model number on the plug's label and whether it already shows in the Apple Home app, and the table below turns that check into a single action per situation.

Read the label, then the Home app, and stop at the first row that fits.

The middle rows stack on top of the others: nothing in Belkin's refund wording mentions HomeKit status, so a paired plug still inside its warranty is worth a claim.

Can I get a refund for my Wemo device?

Yes, if the product was still under Belkin's warranty on or after 31 January 2026 and you have proof of purchase, you may qualify for a refund through the Wemo end-of-support form on Belkin's website.

Belkin's Wemo support page, read on 21 October 2026, says its warranties run 1, 2 or 3 years depending on the model. That gives you a one-minute check, and it is the one to remember: take the order date from your receipt or confirmation email, add your model's warranty term, and see whether the result lands on or after 31 January 2026. Worked backwards (our arithmetic, not Belkin's), that means a 3-year model bought from about 31 January 2023, a 2-year model from 31 January 2024, or a 1-year model from 31 January 2025.

Keep expectations modest. 9to5Google reported in July 2025 that the refund is partial, and that affected products were still on sale as recently as 2023, so a late buyer on a 3-year term is very likely covered. The open question is timing. Belkin states no claim deadline, which is not an invitation to wait; well, technically it is, but nobody wants to be last in a queue a company is winding down. End-of-support notices tend to bury the useful part, much like the Office 2021 end of support pay-or-stay choice did for software.

• Resetting a HomeKit plug to "fix" it removes it from Apple Home for good.
• Works at home but not from work? That is the shutdown, not a fault.
• Delete dead Alexa and Google Assistant routines that name a Wemo.
• GearBrain recommends Matter plugs as replacements, so look for the Matter logo on the box, not a "works with Alexa" sticker.

So the decision is simple: keep what still switches, claim what you're owed, replace the rest. This week, turn every Wemo over, write down the model number from its label, open the Home app, and match each plug to its row before anyone touches a reset button.