Some of the worst hacks exploit unpatched firmware.

Secure Boot protects your PC against bootkit malware. The Windows update refreshes expiring Secure Boot certificates. To install, head to Settings and select Windows Update. I typically advise Windows ...