Loading story…
Microsoft released KB5028222, a monthly security rollup for Windows Server 2008 SP2, covering miscellaneous security improvements to internal Windows OS functionality and bundling fixes previously included in KB5027279. Related Microsoft support material also references KB5028185 for newer Windows builds, indicating the update was part of a broader Patch Tuesday release set.
The company said Windows Server 2008 SP2 is no longer generally supported and that security updates are limited to eligible Azure-based deployments enrolled in the fourth and final year of Extended Security Updates (ESU). Microsoft warned that installation can fail on unsupported editions or on systems missing a properly installed and activated ESU MAK add-on key, and it listed prerequisite servicing stack, SHA-2, and ESU licensing preparation updates required before deployment through Windows Update, the Microsoft Update Catalog, or WSUS.
Map this exposure pattern across your cloud, code, and identities.
4 events from the most recent confirmed update back to the earliest known activity.
Microsoft states that the fourth and final year of Extended Security Updates for eligible Azure-based Windows Server 2008 SP2 deployments runs through January 9, 2024.
Microsoft published the July 11, 2023 security updates including KB5028185 for OS Build 22621.1992 and KB5028222 as the monthly rollup for Windows Server 2008 SP2. The KB5028222 guidance notes miscellaneous security improvements and documents installation prerequisites and a known failure scenario for unsupported or improperly licensed systems.
Microsoft released update KB5027279, whose improvements were later incorporated into the July 2023 monthly rollup for Windows Server 2008 SP2.
Microsoft states that a fourth and final year of Extended Security Updates for Windows Server 2008 SP2 is available only for eligible Azure-based deployments beginning February 14, 2023.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft ended support for **Windows Server 2012** and **Windows Server 2012 R2** on **October 10, 2023**, leaving the platforms without further security updates, bug fixes, technical support, or refreshed online technical content. The change affects organizations still running the legacy server operating systems, which now face increased exposure if they continue operating unsupported workloads. Microsoft and national incident response guidance urged organizations to migrate to newer releases such as **Windows Server 2022** or enroll in **Extended Security Updates (ESU)** where upgrades cannot yet be completed. ESU is available at no additional cost for eligible Azure deployments, while on-premises customers must purchase it and can renew coverage annually through **October 13, 2026**.
Jul 24, 2026
Microsoft released emergency and cumulative updates to address critical issues affecting Windows 10 systems eligible for Extended Security Updates (ESU) following the operating system's official end of support. A significant bug prevented some Windows 10 PCs from enrolling in the ESU program, thereby blocking them from receiving essential security updates. To resolve this, Microsoft issued update KB5071959, which fixes the ESU enrollment wizard failure, and made it available to all Windows 10 22H2 systems. Additionally, the first ESU update, KB5068781, was released to provide ongoing security coverage for enrolled devices. These updates ensure that eligible users can continue to receive security patches and maintain system protection. Another issue addressed was a cosmetic bug that caused false "end of support" alerts on Windows 10 devices still under active support or enrolled in the ESU program. Microsoft resolved this with a cloud configuration update and the KB5068781 cumulative update, ensuring that users with valid ESU licenses or supported LTSC versions no longer see erroneous warnings. These actions are part of Microsoft's broader effort to support users transitioning from Windows 10, providing clear communication and technical fixes to maintain security during the extended support period.
Jun 29, 2026
Microsoft released an **optional, non-security** update for Windows 11 versions **25H2 and 24H2** (KB`5077241`), advancing OS builds to **26200.7922** and **26100.7922**. Reported changes focus on functionality and reliability, including UI updates (e.g., redesigned battery icons and a refreshed Start menu experience), updates to Windows AI-related components, and a servicing stack update (SSU) KB`5077371` intended to improve the robustness of future update installation; the rollout is described as phased/gradual before broader availability. Separately, Microsoft outlined approaching end-of-support deadlines for **Windows 10 Enterprise LTSB 2016**, **Windows 10 IoT Enterprise 2016 LTSB** (both ending **Oct 13, 2026**), and **Windows Server 2016** (ending **Jan 12, 2027**), after which only a paid **Extended Security Updates (ESU)** program can provide security patches for up to three additional years. Microsoft emphasized ESU provides *security updates only* (no new features, quality fixes, or technical support), with pricing starting at **$61/device** for year one (discounted to **$45/device** for Intune/Windows Autopatch-managed systems) and doubling each year; Windows Server 2016 ESU pricing was not disclosed, and Microsoft recommended upgrading to newer LTSC/LTS releases as the preferred path.
Jun 29, 2026