Loading story…
Enterprise fleets still running Windows 10 are carrying significantly higher security risk than Windows 11 systems after Microsoft ended support for Windows 10 on 14 October 2025. Data cited from Lansweeper shows Windows 10 still accounts for 16.9% of Windows client devices, while Windows 11 has reached 78.8% adoption, yet Windows 10 endpoints average 1,903 active CVEs per device compared with 652 on Windows 11. About 66.6% of Windows 10 vulnerabilities are rated high or critical, and 2.4% are known to be actively exploited, with exploitability reported as 1.7 times higher than on Windows 11.
The exposure is concentrated in organizations and sectors where migration has lagged, particularly SMBs and industries with long-lived or specialized hardware such as healthcare and pharmaceuticals, retail, and manufacturing. Researchers said hardware incompatibility is not the main barrier to upgrading, while nearly one-fifth of monitored Windows devices still run end-of-life operating systems including Windows 7, Windows 8.1, and Windows XP. Although Microsoft offers Extended Security Updates as a temporary bridge for some Windows 10 users, coverage is limited and consumer ESU expires on 12 October 2027, leaving organizations facing growing operational, compliance, insurance, and regulatory risk if legacy systems remain in production.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Help Net Security reports that Microsoft ended support for Windows 10, leaving remaining users without regular security updates and increasing security and compliance risk for organizations that have not migrated.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is ending support for Windows 10 on October 14, 2025, marking a significant transition for millions of users and organizations worldwide. After this date, Windows 10 devices will no longer receive free security updates, leaving them potentially vulnerable to newly discovered threats. The end-of-life (EOL) status does not mean that Windows 10 systems will immediately stop functioning, but it does introduce a gradual increase in risk as unpatched vulnerabilities accumulate. Security experts warn that the real danger emerges when new security flaws are discovered and Microsoft chooses not to release patches for the EOL operating system, potentially resulting in 'forever-day' vulnerabilities. Users and IT administrators are urged to take proactive steps, as doing nothing is not considered a safe option. Microsoft is offering Extended Security Updates (ESUs) for Windows 10 on a subscription basis, allowing organizations and individuals to continue receiving security patches for up to three additional years, though these updates will not be free for most users. There are also some new ways to obtain security updates for an extra year at no cost, but eligibility and availability may vary. For those unable to upgrade to Windows 11 due to hardware incompatibility, Microsoft will block upgrades through Windows Update and encourage the purchase of new, compatible devices. The transition is expected to impact not only businesses but also consumers with older, yet still functional, PCs. IT professionals are reminded of the extensive efforts and costs involved in past transitions, such as Y2K, and are cautioned that while a catastrophic event is unlikely, the risks associated with unsupported systems are real and will increase over time. The EOL of Windows 10 is being compared to Y2K in terms of the scale of preparation required, though the nature of the risk is different, with a slow buildup of vulnerabilities rather than an immediate crisis. Organizations are advised to assess their device inventories, plan for upgrades or replacements, and consider ESU subscriptions where necessary. The looming deadline has prompted increased warning messages from Microsoft, urging users to act before support ends. Security researchers emphasize that the persistence of EOL systems in the environment could create long-term security challenges. The overall consensus is that while the transition may not result in immediate widespread disruption, the cumulative effect of unpatched vulnerabilities could pose significant risks if not managed properly. The end of Windows 10 support is a critical event for the IT and security community, requiring careful planning and timely action to mitigate potential threats.
Jun 29, 2026
Microsoft is warning organizations that **Windows Server 2016**, **Windows 10 Enterprise LTSB 2016**, and **Windows 10 IoT Enterprise 2016 LTSB** are approaching end of support, after which they will no longer receive security patches, bug fixes, or technical support. Reported lifecycle dates include **October 13, 2026** for the Windows 10 2016 LTSB variants and **January 12, 2027** for Windows Server 2016; Microsoft’s guidance is to prioritize upgrades (e.g., to **Windows Server 2025** and Windows 10/11 LTSC options where hardware permits) and, if migration timelines slip, to use the **Extended Security Updates (ESU)** program as a short-term bridge for up to three years with only “critical” and “important” security updates. Separately, Microsoft released the **Windows 11 KB5077241** optional (non-security) preview cumulative update with 29 quality changes, including **BitLocker reliability** improvements (addressing freezes after entering a recovery key) and new built-in capabilities such as a taskbar **network speed test** and **native Sysmon functionality** (disabled by default). The update also enables **Quick Machine Recovery (QMR)** by default on certain unmanaged Windows Pro devices and is positioned for admin testing ahead of the next Patch Tuesday release, but it does **not** include security fixes.
Jun 29, 2026
Microsoft released its October 2025 Patch Tuesday security updates, addressing a total of 172 vulnerabilities across its product suite, including six zero-day vulnerabilities. The update marks a significant milestone as it is the final free security update for Windows 10, which has now reached its end of support, requiring users and enterprises to enroll in Extended Security Updates (ESU) for continued protection. Among the vulnerabilities patched, eight were rated as 'Critical,' with five being remote code execution flaws and three classified as elevation of privilege vulnerabilities. The breakdown of vulnerabilities includes 80 elevation of privilege, 11 security feature bypass, 31 remote code execution, 28 information disclosure, 11 denial of service, and 10 spoofing vulnerabilities. Notably, two of the zero-day vulnerabilities were publicly disclosed prior to the patch, affecting Windows SMB Server and Microsoft SQL Server, while three zero-days were actively exploited in the wild. One of the exploited zero-days, CVE-2025-24990, involved the Agere Modem driver, which was being abused to gain administrative privileges, prompting Microsoft to remove the vulnerable driver from supported Windows operating systems. The Patch Tuesday release also included updates for a wide range of Microsoft products and components, such as .NET, Visual Studio, Active Directory Federation Services, Microsoft Office suite, Azure services, Windows authentication methods, and various Windows system components. The update was described as the largest Patch Tuesday release to date, with 167 CVEs directly patched according to some sources, excluding additional vulnerabilities in Chromium, MITRE, GitHub, CERT/CC, and cloud services that were addressed separately. The security updates did not include fixes for vulnerabilities in Microsoft Edge, Azure, or Mariner that were released earlier in the month. Microsoft emphasized the importance of these updates, especially for organizations still running Windows 10, as the cessation of free support increases the risk of exposure to unpatched vulnerabilities. The comprehensive nature of the update reflects the ongoing complexity and breadth of the Microsoft ecosystem, with critical patches spanning from core Windows components to cloud and developer tools. Security professionals are advised to prioritize the deployment of these patches, particularly those addressing actively exploited zero-days and critical remote code execution vulnerabilities. The update also highlights the evolving threat landscape, with attackers increasingly targeting third-party drivers and core system components to escalate privileges. Organizations are encouraged to review the full list of patched vulnerabilities and assess their exposure, especially in light of the end of support for Windows 10. The October 2025 Patch Tuesday underscores the necessity of timely patch management and the challenges posed by legacy systems in maintaining a secure enterprise environment.
Jun 29, 2026