Loading story…
Microsoft is ending support for Windows 10 on October 14, 2025, marking a significant transition for millions of users and organizations worldwide. After this date, Windows 10 devices will no longer receive free security updates, leaving them potentially vulnerable to newly discovered threats. The end-of-life (EOL) status does not mean that Windows 10 systems will immediately stop functioning, but it does introduce a gradual increase in risk as unpatched vulnerabilities accumulate. Security experts warn that the real danger emerges when new security flaws are discovered and Microsoft chooses not to release patches for the EOL operating system, potentially resulting in 'forever-day' vulnerabilities. Users and IT administrators are urged to take proactive steps, as doing nothing is not considered a safe option. Microsoft is offering Extended Security Updates (ESUs) for Windows 10 on a subscription basis, allowing organizations and individuals to continue receiving security patches for up to three additional years, though these updates will not be free for most users. There are also some new ways to obtain security updates for an extra year at no cost, but eligibility and availability may vary. For those unable to upgrade to Windows 11 due to hardware incompatibility, Microsoft will block upgrades through Windows Update and encourage the purchase of new, compatible devices. The transition is expected to impact not only businesses but also consumers with older, yet still functional, PCs. IT professionals are reminded of the extensive efforts and costs involved in past transitions, such as Y2K, and are cautioned that while a catastrophic event is unlikely, the risks associated with unsupported systems are real and will increase over time. The EOL of Windows 10 is being compared to Y2K in terms of the scale of preparation required, though the nature of the risk is different, with a slow buildup of vulnerabilities rather than an immediate crisis. Organizations are advised to assess their device inventories, plan for upgrades or replacements, and consider ESU subscriptions where necessary. The looming deadline has prompted increased warning messages from Microsoft, urging users to act before support ends. Security researchers emphasize that the persistence of EOL systems in the environment could create long-term security challenges. The overall consensus is that while the transition may not result in immediate widespread disruption, the cumulative effect of unpatched vulnerabilities could pose significant risks if not managed properly. The end of Windows 10 support is a critical event for the IT and security community, requiring careful planning and timely action to mitigate potential threats.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Subsequent reporting explained that Microsoft Defender could still provide some protection on Windows 10 systems after end of support, but it could not replace missing operating system security patches. The guidance reinforced that antivirus alone was insufficient for safely operating an unsupported OS long term.
After support ended, security-focused coverage urged organizations to prioritize migration plans because remaining Windows 10 systems would become increasingly attractive targets. The reporting framed the end of support as an enterprise risk-management issue rather than only a consumer upgrade problem.
Following end of support, guidance for affected users focused on five main paths: upgrade eligible PCs to Windows 11, replace hardware, use Windows 365, switch to another OS, or buy ESU coverage. Reports also noted unsupported-install workarounds for some Windows 11-ineligible devices and third-party micropatching as a limited mitigation.
Microsoft ended support for Windows 10 on October 14, 2025, stopping free security updates, bug fixes, feature updates, and standard technical support for most users. Multiple outlets reported that unsupported systems would remain functional but face growing exposure to unpatched vulnerabilities and zero-days.
Microsoft released the last regular Patch Tuesday update for Windows 10 as the operating system reached the end of its supported lifecycle. This marked the final standard monthly security update for most Windows 10 editions.
On the eve of end of support, multiple reports highlighted Microsoft's warning that Windows 10 security updates would stop on October 14, 2025. Coverage emphasized that users needed to upgrade, move to Windows 365, or enroll in ESU to avoid running unsupported systems.
Ahead of Windows 10 end of support, Microsoft made its consumer Extended Security Updates program available for one additional year through October 2026. Reports said users could pay $30 or qualify through options such as Microsoft Rewards or Windows Backup, with some conditions involving a Microsoft account and OneDrive backup.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
18 references tracked. Mallory keeps watching after this page renders.
kyberturvallisuuskeskus.fi
Open sourcezdnet.com
Open sourcescworld.com
Open sourcearstechnica.com
Open sourcesecurityonline.info
Open sourcezdnet.com
Open sourcerunzero.com
Open sourcezdnet.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has announced the end-of-life (EOL) for several widely used software products, including Windows 10, Office 2016, Office 2019, Exchange Server 2016, and Exchange Server 2019, marking a significant transition for organizations relying on these platforms. The final security updates for Office 2016 and Office 2019 will be released this month, after which these products will no longer receive security patches or technical support. Organizations are strongly encouraged to migrate to newer versions such as Office 2024 or Office LTSC 2024, which will be supported through October 2029, or to adopt Microsoft 365 Apps for ongoing feature and security updates. The end of support for Exchange Server 2016 and 2019 is closely linked to Office upgrades, with Microsoft recommending migration to Exchange Online or the subscription edition for continued security and compliance. For Windows 11, Microsoft has issued reminders that the Home and Pro editions of version 23H2 will reach end of servicing on November 11, 2025, after which they will no longer receive monthly security or preview updates. Enterprise, Education, and IoT Enterprise editions of Windows 11 23H2 will remain supported until November 2026, providing organizations with additional time to plan migrations. Users are advised to upgrade to Windows 11 24H2 or later, with automatic updates available for unmanaged devices, though some systems may be held back due to compatibility issues such as the presence of SenseShield Technology code-obfuscation drivers. The transition to newer software versions is critical to maintaining security, as unsupported products become increasingly vulnerable to emerging threats. Microsoft has also introduced new tools, such as Windows Backup for Organizations, to facilitate smoother migrations and ensure business continuity. The company emphasizes the importance of timely upgrades to minimize operational and security risks associated with unsupported software. These EOL milestones represent the culmination of nearly a decade of service for several Microsoft products, underscoring the need for proactive IT planning. Organizations that have not yet migrated are urged to act quickly to avoid exposure to unpatched vulnerabilities. The coordinated end-of-support for multiple products may require significant resource allocation and careful scheduling to ensure seamless transitions. Microsoft’s guidance and new migration tools are designed to support enterprises through this period of change, but the responsibility for timely action rests with IT leaders. Failure to upgrade could result in compliance issues, increased attack surface, and potential business disruptions. The end-of-life announcements serve as a critical reminder of the ongoing lifecycle management required for enterprise software environments.
Jun 29, 2026
Enterprise fleets still running Windows 10 are carrying significantly higher security risk than Windows 11 systems after Microsoft ended support for Windows 10 on 14 October 2025. Data cited from Lansweeper shows Windows 10 still accounts for **16.9%** of Windows client devices, while Windows 11 has reached **78.8%** adoption, yet Windows 10 endpoints average **1,903 active CVEs** per device compared with **652** on Windows 11. About **66.6%** of Windows 10 vulnerabilities are rated high or critical, and **2.4%** are known to be actively exploited, with exploitability reported as **1.7 times higher** than on Windows 11. The exposure is concentrated in organizations and sectors where migration has lagged, particularly SMBs and industries with long-lived or specialized hardware such as **healthcare and pharmaceuticals, retail, and manufacturing**. Researchers said hardware incompatibility is not the main barrier to upgrading, while nearly one-fifth of monitored Windows devices still run end-of-life operating systems including **Windows 7, Windows 8.1, and Windows XP**. Although Microsoft offers Extended Security Updates as a temporary bridge for some Windows 10 users, coverage is limited and consumer ESU expires on **12 October 2027**, leaving organizations facing growing operational, compliance, insurance, and regulatory risk if legacy systems remain in production.
Jul 20, 2026
Microsoft is warning organizations that **Windows Server 2016**, **Windows 10 Enterprise LTSB 2016**, and **Windows 10 IoT Enterprise 2016 LTSB** are approaching end of support, after which they will no longer receive security patches, bug fixes, or technical support. Reported lifecycle dates include **October 13, 2026** for the Windows 10 2016 LTSB variants and **January 12, 2027** for Windows Server 2016; Microsoft’s guidance is to prioritize upgrades (e.g., to **Windows Server 2025** and Windows 10/11 LTSC options where hardware permits) and, if migration timelines slip, to use the **Extended Security Updates (ESU)** program as a short-term bridge for up to three years with only “critical” and “important” security updates. Separately, Microsoft released the **Windows 11 KB5077241** optional (non-security) preview cumulative update with 29 quality changes, including **BitLocker reliability** improvements (addressing freezes after entering a recovery key) and new built-in capabilities such as a taskbar **network speed test** and **native Sysmon functionality** (disabled by default). The update also enables **Quick Machine Recovery (QMR)** by default on certain unmanaged Windows Pro devices and is positioned for admin testing ahead of the next Patch Tuesday release, but it does **not** include security fixes.
Jun 29, 2026