Daily BSOD for the last several days

Event[22281]
  Log Name: System
  Source: Service Control Manager
  Date: 2025-11-22T10:15:46.9790000Z
  Event ID: 7040
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic,
  User: S-1-5-21-2318473919-3381892624-2426068161-1001
  User Name: GAMER\deepr
  Computer: GAMER
  Description:
The start type of the Windows Error Reporting Service service was changed from disabled to auto start.

Event[22420]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2025-11-22T10:33:26.4630000Z
  Event ID: 1801
  Task: N/A
  Level: Error
  Opcode: Info 
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: GAMER
  Description:
Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:3006;OEMModelNumber:System Product Name;OEMModelBaseBoard:TUF Z390-PLUS GAMING (WI-FI);OEMModelSystemFamily:To be filled by O.E.M.;OEMManufacturerName:System manufacturer;OEMModelSKU:ASUS_MB_CNL;OSArchitecture:amd64;
BucketId: 008592c2629e6c80e74f971f2a24e3254163cd4f1ec207e0211fe7889111160e
BucketConfidenceLevel:
UpdateType: 0
HResult: The operation completed successfully.

Windows Error Reporting:
+++ WER0 +++:
No Data
+++ WER1 +++:
No Data
+++ WER2 +++:
No Data
+++ WER3 +++:
No Data
+++ WER4 +++:
No Data
+++ WER5 +++:
No Data
+++ WER6 +++:
No Data
+++ WER7 +++:
No Data
+++ WER8 +++:
No Data
+++ WER9 +++:
No Data

Event[23087]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2025-11-25T12:48:20.3150000Z
  Event ID: 1801
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: GAMER
  Description:
Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:3006;OEMModelNumber:System Product Name;OEMModelBaseBoard:TUF Z390-PLUS GAMING (WI-FI);OEMModelSystemFamily:To be filled by O.E.M.;OEMManufacturerName:System manufacturer;OEMModelSKU:ASUS_MB_CNL;OSArchitecture:amd64;
BucketId: 008592c2629e6c80e74f971f2a24e3254163cd4f1ec207e0211fe7889111160e
BucketConfidenceLevel:
UpdateType: 0
HResult: The operation completed successfully.

    # Confirm if UEFI is enabled and if SecureBoot is enabled
    $FirmwareType = Get-FirmwareType

    # If the system is not using UEFI secureboot is not enabled as it is a UEFI-specific feature
    If ( $FirmwareType -ne "UEFI" )
    {
        $SecureBoot = "Not Enabled"
    }

    Else
    {
        $ErrorActionPreference = 'SilentlyContinue'
        $SecureBoot = Confirm-SecureBootUEFI | Out-Null
        $ErrorActionPreference = 'Continue'

        If ( $SecureBoot -eq $True )
        {
            $SecureBootStatus = "Enabled"
        }
        Else
        {
            $SecureBootStatus = "Not Enabled"
        }
    }

    $FirmwareInfo =
    [PSCustomObject]@{
        "Safe Mode"    = $SafeMode
        "FastStartup"  = $FastStartup
        "FirmwareType" = $FirmwareType
        "SecureBoot"   = $SecureBootStatus
    }

    Return $FirmwareInfo
}

Safe Mode    : Normal boot
FastStartup  : Disabled
FirmwareType : UEFI
SecureBoot   : Not Enabled