Loading story…
Community-curated “ultimate” ISO images for Windows 7 and Windows Vista were released that reportedly bundle all available patches through January 2026, including what is described as Microsoft’s final Vista update delivered under the Premium Assurance program. The images are positioned for enthusiasts and for lab use (VMs, retro software testing), while acknowledging that even fully patched legacy OS deployments remain a poor choice for modern day-to-day use due to obsolete software support and an inherently weak security posture compared with current platforms.
Separately, a UK ATM was observed displaying a Windows 7 Professional login screen (requesting a username and password rather than the normal ATM PIN workflow), highlighting the continued presence of end-of-life Windows in industrial and commercial systems and the operational risk of legacy platforms surfacing to end users. The report notes Windows 7’s end of extended support in 2020 and suggests such embedded deployments may persist because they are assumed to be isolated from the public internet, though the incident underscores how misconfiguration or system faults can expose underlying OS interfaces and increase security and fraud concerns.
Map this exposure pattern across your cloud, code, and identities.
4 events from the most recent confirmed update back to the earliest known activity.
A Windows community figure using the pseudonym Bob Pony created custom ISO images for Windows 7 and Vista that bundle all available patches through January 2026. The images were presented as useful for enthusiasts, virtual machines, and legacy software testing.
An ATM in England, reported as being in Manchester, showed a Windows 7 Professional login screen and asked for a Windows username and password instead of a customer PIN. The malfunction prevented customers from withdrawing cash and likely resulted from a crash or reboot into the underlying operating system.
The Security Online reference says Microsoft released a final Windows Vista update in January under the Premium Assurance program, extending Vista's lifecycle to nearly 7,000 days. This update was later incorporated into a community-made consolidated ISO.
Microsoft ended extended support for Windows 7 in 2020, leaving the operating system unsupported for most users and organizations. Despite this, some commercial and industrial systems such as ATMs continued to run it.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
2 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A significant proportion of enterprise assets are currently running end-of-life (EOL) operating systems, posing a growing security risk as these systems no longer receive regular feature updates or bug fixes. According to research conducted by runZero, 8.56% of assets across hundreds of U.S. enterprises are operating on EOL systems, with 5% already beyond extended support and thus missing critical security patches. The prevalence of these unsupported systems is particularly high in industries such as retail, machinery, electronics manufacturing, healthcare, and social services, where legacy applications are often essential for core business functions. In healthcare and social services, the use of unsupported operating systems can directly impact patient safety due to their integration with critical care applications. The situation is set to worsen dramatically with the upcoming end-of-life date for Windows 10 on October 14, 2025. After this date, approximately one-third of all enterprise Windows assets will lose official support, causing the overall percentage of EOL systems in enterprises to surge from 5% to around 16%. This transition, referred to as the 'Winpocalypse,' will disproportionately affect sectors already struggling with legacy dependencies, especially healthcare and social services, which are expected to see the steepest increases in exposure. Many organizations remain reliant on Windows 10 and earlier versions due to business-critical applications that cannot be easily migrated or upgraded. The persistence of these 'undead' systems is often due to forgotten servers or specialized equipment, such as medical devices, that are incompatible with newer operating systems. Attackers exploit these vulnerabilities by using network reconnaissance to identify and compromise outdated systems, which are often overlooked in standard security assessments. Internet scans reveal only a portion of the risk, as many legacy systems are not directly exposed but remain accessible to attackers who have breached the network perimeter. Security experts emphasize the need for organizations to establish a baseline inventory of EOL systems and to assess their unique risk profiles, rather than assuming complete eradication of unsupported assets is feasible. The looming Windows 10 deadline has prompted renewed calls for enterprises to accelerate migration plans and to implement compensating controls where immediate upgrades are not possible. Failure to address the growing population of EOL systems will significantly expand the attack surface available to cybercriminals, increasing the likelihood of successful breaches. The research underscores the urgency for proactive asset management, regular vulnerability assessments, and strategic planning to mitigate the risks associated with legacy operating systems. Organizations are advised to prioritize the replacement or isolation of unsupported systems, especially those integral to critical business operations. The findings highlight the intersection of operational necessity and cybersecurity risk, illustrating the complex challenges enterprises face in balancing legacy support with modern security requirements. As the Windows 10 end-of-life approaches, the need for comprehensive risk management strategies becomes ever more pressing for organizations across all sectors.
Jun 29, 2026
Enterprise fleets still running Windows 10 are carrying significantly higher security risk than Windows 11 systems after Microsoft ended support for Windows 10 on 14 October 2025. Data cited from Lansweeper shows Windows 10 still accounts for **16.9%** of Windows client devices, while Windows 11 has reached **78.8%** adoption, yet Windows 10 endpoints average **1,903 active CVEs** per device compared with **652** on Windows 11. About **66.6%** of Windows 10 vulnerabilities are rated high or critical, and **2.4%** are known to be actively exploited, with exploitability reported as **1.7 times higher** than on Windows 11. The exposure is concentrated in organizations and sectors where migration has lagged, particularly SMBs and industries with long-lived or specialized hardware such as **healthcare and pharmaceuticals, retail, and manufacturing**. Researchers said hardware incompatibility is not the main barrier to upgrading, while nearly one-fifth of monitored Windows devices still run end-of-life operating systems including **Windows 7, Windows 8.1, and Windows XP**. Although Microsoft offers Extended Security Updates as a temporary bridge for some Windows 10 users, coverage is limited and consumer ESU expires on **12 October 2027**, leaving organizations facing growing operational, compliance, insurance, and regulatory risk if legacy systems remain in production.
Jul 20, 2026
Microsoft is warning organizations that **Windows Server 2016**, **Windows 10 Enterprise LTSB 2016**, and **Windows 10 IoT Enterprise 2016 LTSB** are approaching end of support, after which they will no longer receive security patches, bug fixes, or technical support. Reported lifecycle dates include **October 13, 2026** for the Windows 10 2016 LTSB variants and **January 12, 2027** for Windows Server 2016; Microsoft’s guidance is to prioritize upgrades (e.g., to **Windows Server 2025** and Windows 10/11 LTSC options where hardware permits) and, if migration timelines slip, to use the **Extended Security Updates (ESU)** program as a short-term bridge for up to three years with only “critical” and “important” security updates. Separately, Microsoft released the **Windows 11 KB5077241** optional (non-security) preview cumulative update with 29 quality changes, including **BitLocker reliability** improvements (addressing freezes after entering a recovery key) and new built-in capabilities such as a taskbar **network speed test** and **native Sysmon functionality** (disabled by default). The update also enables **Quick Machine Recovery (QMR)** by default on certain unmanaged Windows Pro devices and is positioned for admin testing ahead of the next Patch Tuesday release, but it does **not** include security fixes.
Jun 29, 2026