Loading story…
Microsoft has announced the end-of-life (EOL) for several widely used software products, including Windows 10, Office 2016, Office 2019, Exchange Server 2016, and Exchange Server 2019, marking a significant transition for organizations relying on these platforms. The final security updates for Office 2016 and Office 2019 will be released this month, after which these products will no longer receive security patches or technical support. Organizations are strongly encouraged to migrate to newer versions such as Office 2024 or Office LTSC 2024, which will be supported through October 2029, or to adopt Microsoft 365 Apps for ongoing feature and security updates. The end of support for Exchange Server 2016 and 2019 is closely linked to Office upgrades, with Microsoft recommending migration to Exchange Online or the subscription edition for continued security and compliance. For Windows 11, Microsoft has issued reminders that the Home and Pro editions of version 23H2 will reach end of servicing on November 11, 2025, after which they will no longer receive monthly security or preview updates. Enterprise, Education, and IoT Enterprise editions of Windows 11 23H2 will remain supported until November 2026, providing organizations with additional time to plan migrations. Users are advised to upgrade to Windows 11 24H2 or later, with automatic updates available for unmanaged devices, though some systems may be held back due to compatibility issues such as the presence of SenseShield Technology code-obfuscation drivers. The transition to newer software versions is critical to maintaining security, as unsupported products become increasingly vulnerable to emerging threats. Microsoft has also introduced new tools, such as Windows Backup for Organizations, to facilitate smoother migrations and ensure business continuity. The company emphasizes the importance of timely upgrades to minimize operational and security risks associated with unsupported software. These EOL milestones represent the culmination of nearly a decade of service for several Microsoft products, underscoring the need for proactive IT planning. Organizations that have not yet migrated are urged to act quickly to avoid exposure to unpatched vulnerabilities. The coordinated end-of-support for multiple products may require significant resource allocation and careful scheduling to ensure seamless transitions. Microsoft’s guidance and new migration tools are designed to support enterprises through this period of change, but the responsibility for timely action rests with IT leaders. Failure to upgrade could result in compliance issues, increased attack surface, and potential business disruptions. The end-of-life announcements serve as a critical reminder of the ongoing lifecycle management required for enterprise software environments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Microsoft announced an additional paid Extended Security Updates window for Exchange Server 2016/2019 and Skype for Business Server 2015/2019 because some customers had not completed migrations before the original April 2026 cutoff. The extra ESU period runs from May 2026 through October 2026, with Microsoft warning there will be no further extensions after that.
Microsoft announced that ASP.NET Core 2.3 will reach end of life on April 7, 2027, after which security patches, bug fixes, and technical support will end for the framework and related packages, including Entity Framework 2.3. The company advised organizations to migrate to a supported .NET release such as .NET 10 LTS.
Microsoft scheduled Windows 11 23H2 Home and Pro editions to reach end of support on November 11, 2025, after which they will no longer receive security and quality updates. The date is referenced as being 30 days away in reporting published on October 10, 2025.
On October 10, 2025, security coverage previewed Microsoft's October 2025 Patch Tuesday and drew attention to the approaching end of support for Windows 11 23H2 Home and Pro. The reports did not describe a new patch release or other discrete incident beyond the upcoming lifecycle milestone.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourceinfoworld.com
Open sourcehelpnetsecurity.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is ending support for Windows 10 on October 14, 2025, marking a significant transition for millions of users and organizations worldwide. After this date, Windows 10 devices will no longer receive free security updates, leaving them potentially vulnerable to newly discovered threats. The end-of-life (EOL) status does not mean that Windows 10 systems will immediately stop functioning, but it does introduce a gradual increase in risk as unpatched vulnerabilities accumulate. Security experts warn that the real danger emerges when new security flaws are discovered and Microsoft chooses not to release patches for the EOL operating system, potentially resulting in 'forever-day' vulnerabilities. Users and IT administrators are urged to take proactive steps, as doing nothing is not considered a safe option. Microsoft is offering Extended Security Updates (ESUs) for Windows 10 on a subscription basis, allowing organizations and individuals to continue receiving security patches for up to three additional years, though these updates will not be free for most users. There are also some new ways to obtain security updates for an extra year at no cost, but eligibility and availability may vary. For those unable to upgrade to Windows 11 due to hardware incompatibility, Microsoft will block upgrades through Windows Update and encourage the purchase of new, compatible devices. The transition is expected to impact not only businesses but also consumers with older, yet still functional, PCs. IT professionals are reminded of the extensive efforts and costs involved in past transitions, such as Y2K, and are cautioned that while a catastrophic event is unlikely, the risks associated with unsupported systems are real and will increase over time. The EOL of Windows 10 is being compared to Y2K in terms of the scale of preparation required, though the nature of the risk is different, with a slow buildup of vulnerabilities rather than an immediate crisis. Organizations are advised to assess their device inventories, plan for upgrades or replacements, and consider ESU subscriptions where necessary. The looming deadline has prompted increased warning messages from Microsoft, urging users to act before support ends. Security researchers emphasize that the persistence of EOL systems in the environment could create long-term security challenges. The overall consensus is that while the transition may not result in immediate widespread disruption, the cumulative effect of unpatched vulnerabilities could pose significant risks if not managed properly. The end of Windows 10 support is a critical event for the IT and security community, requiring careful planning and timely action to mitigate potential threats.
Jun 29, 2026
Microsoft said the **Extended Security Update (ESU)** program for **Exchange Server 2016** and **Exchange Server 2019** will end in **October 2026** with no further extension. The notice follows Microsoft's April announcement of a second ESU period, a six-month continuation after both on-premises Exchange versions had already reached end of support, confirming that customers relying on legacy deployments now face a fixed deadline for receiving security patches. Microsoft is urging organizations to move to **Exchange Server Subscription Edition (SE)** or migrate to **Exchange Online** as support winds down. The company’s lifecycle guidance and follow-up reporting indicate that Exchange 2019 customers can perform an in-place upgrade to Exchange Server SE in a process similar to installing a cumulative update, while Exchange 2016 customers must plan a broader migration path before security coverage ends.
Jul 22, 2026
Microsoft said **Extended Security Updates** for **Exchange Server 2016** and **Exchange Server 2019** will end in October 2026, closing the final support path for organizations still running those on-premises versions. The company had already ended mainstream support for both products on **October 14, 2025**, after which they stopped receiving regular security updates, bug fixes, technical support, and time zone updates; the current **Period 2 ESU** offering followed a six-month extension and Microsoft said it will not be extended again. Microsoft is directing affected customers to move to **Exchange Server Subscription Edition (SE)**, now the only supported on-premises Exchange release, or migrate to **Exchange Online** or **Microsoft 365**. Organizations running **Exchange Server 2019 CU15** can transition to Exchange Server SE through an in-place cumulative update without a new license key, while older deployments require legacy migration, and the guidance applies across on-premises, hybrid, and management-tools-only Exchange environments.
Jul 24, 2026