Loading story…
Microsoft has extended the consumer Windows 10 Extended Security Updates (ESU) program by an additional year, allowing enrolled personal devices running Windows 10 22H2 to continue receiving critical and important security updates until October 12, 2027. The change appeared in updated Microsoft documentation rather than a formal announcement, and applies to home-user systems after Windows 10 reached end of support in October 2025.
Microsoft said users already enrolled in consumer ESU will receive the extension automatically with no further action required. Enrollment remains available through a Microsoft account settings sync, 1,000 Microsoft Rewards points, or a $30 one-time fee, while eligibility is limited to personal devices and excludes domain-joined or MDM-managed systems. The extension preserves access to monthly security fixes, including updates such as Secure Boot certificate-related patches, for users who have not yet migrated to Windows 11.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft updated its documentation to extend the consumer Windows 10 Extended Security Updates program by one additional year, moving the end date from October 2026 to October 12, 2027. Existing enrolled users were stated to remain covered automatically under the new timeline.
Microsoft ended standard support for Windows 10, after which regular users no longer received technical support, feature updates, or security updates unless covered by LTSC or ESU.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
15 references tracked. Mallory keeps watching after this page renders.
zdnet.fr
Open sourcetomshardware.com
Open sourcecybersecuritynews.com
Open sourcehelpnetsecurity.com
Open sourcemicrosoft.com
Open sourcemicrosoft.com
Open sourcemicrosoft.com
Open sourceblogs.windows.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has introduced the Windows 10 Extended Security Updates (ESU) program, allowing eligible consumer users to receive an additional year of security updates after official support for Windows 10 ended. The ESU can be accessed for free by using Windows Backup, redeeming Microsoft Rewards points, or through a one-time purchase, with special provisions for users in the European Economic Area. The program is limited to up to 10 devices per user and is not available for corporate or commercial licenses, requiring devices to run at least version 22H2 and be linked to an administrator Microsoft account. Following the October 2025 updates, a bug has caused some Windows 10 systems—including those enrolled in the ESU program and those running supported LTSC editions—to display incorrect end-of-support warnings. Microsoft clarified that this is a cosmetic issue and does not affect the delivery of security updates. A cloud configuration update has been deployed to address the erroneous messages, but some devices may require manual intervention using Group Policy and Known Issue Rollback. A permanent fix is planned for a future Windows update.
Jun 29, 2026
Microsoft has extended free security updates for Windows 10 users until October 2026, allowing personal devices to continue receiving critical patches beyond the official end-of-support date. To access these updates, users must enroll their devices with a Microsoft account, and those in the European Economic Area automatically qualify. This extension is particularly beneficial for users whose PCs are not eligible for a Windows 11 upgrade, ensuring continued protection against vulnerabilities for millions of devices. However, the rollout of the first Extended Security Update (ESU), KB5068781, has encountered technical issues for some business users. Devices activated via Windows subscription through the Microsoft 365 Admin Center are experiencing installation failures with error code 0x800f0922, causing the update to roll back after a restart. Microsoft has acknowledged the problem and is investigating, but no workaround or estimated fix date has been provided. Some organizations have also reported that not all eligible devices are being offered the update, complicating patch management for enterprise environments.
Jun 29, 2026
Microsoft released an **optional, non-security** update for Windows 11 versions **25H2 and 24H2** (KB`5077241`), advancing OS builds to **26200.7922** and **26100.7922**. Reported changes focus on functionality and reliability, including UI updates (e.g., redesigned battery icons and a refreshed Start menu experience), updates to Windows AI-related components, and a servicing stack update (SSU) KB`5077371` intended to improve the robustness of future update installation; the rollout is described as phased/gradual before broader availability. Separately, Microsoft outlined approaching end-of-support deadlines for **Windows 10 Enterprise LTSB 2016**, **Windows 10 IoT Enterprise 2016 LTSB** (both ending **Oct 13, 2026**), and **Windows Server 2016** (ending **Jan 12, 2027**), after which only a paid **Extended Security Updates (ESU)** program can provide security patches for up to three additional years. Microsoft emphasized ESU provides *security updates only* (no new features, quality fixes, or technical support), with pricing starting at **$61/device** for year one (discounted to **$45/device** for Intune/Windows Autopatch-managed systems) and doubling each year; Windows Server 2016 ESU pricing was not disclosed, and Microsoft recommended upgrading to newer LTSC/LTS releases as the preferred path.
Jun 29, 2026