Microsoft released cumulative non-security out-of-band updates for Windows 11 devices that cannot receive current certificate trust lists. KB5134133 covers 24H2, 25H2 and 26H2; KB5134134 covers 26H1. They deliver updated trust information to disconnected systems, devices unable to reach Microsoft’s certificate service and those with automatic CTL updates disabled. The notices link to the eMudhra response, but do not establish a new attack on every PC. Hotpatch-enrolled devices installing KB5134133 will not receive hotpatch updates until the January 2027 baseline, making deployment-policy review important.