Loading story…
Microsoft ended support for Windows Server 2012 and Windows Server 2012 R2 on October 10, 2023, leaving the platforms without further security updates, bug fixes, technical support, or refreshed online technical content. The change affects organizations still running the legacy server operating systems, which now face increased exposure if they continue operating unsupported workloads.
Microsoft and national incident response guidance urged organizations to migrate to newer releases such as Windows Server 2022 or enroll in Extended Security Updates (ESU) where upgrades cannot yet be completed. ESU is available at no additional cost for eligible Azure deployments, while on-premises customers must purchase it and can renew coverage annually through October 13, 2026.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Support for Windows Server 2012 and Windows Server 2012 R2 ended on this date. Afterward, the products no longer received security updates, non-security updates, bug fixes, technical support, or online technical content updates.
Microsoft published a lifecycle announcement stating that support for Windows Server 2012 and Windows Server 2012 R2 would end on October 10, 2023, and outlined Extended Security Updates as a mitigation path.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has announced the end-of-life (EOL) for several widely used software products, including Windows 10, Office 2016, Office 2019, Exchange Server 2016, and Exchange Server 2019, marking a significant transition for organizations relying on these platforms. The final security updates for Office 2016 and Office 2019 will be released this month, after which these products will no longer receive security patches or technical support. Organizations are strongly encouraged to migrate to newer versions such as Office 2024 or Office LTSC 2024, which will be supported through October 2029, or to adopt Microsoft 365 Apps for ongoing feature and security updates. The end of support for Exchange Server 2016 and 2019 is closely linked to Office upgrades, with Microsoft recommending migration to Exchange Online or the subscription edition for continued security and compliance. For Windows 11, Microsoft has issued reminders that the Home and Pro editions of version 23H2 will reach end of servicing on November 11, 2025, after which they will no longer receive monthly security or preview updates. Enterprise, Education, and IoT Enterprise editions of Windows 11 23H2 will remain supported until November 2026, providing organizations with additional time to plan migrations. Users are advised to upgrade to Windows 11 24H2 or later, with automatic updates available for unmanaged devices, though some systems may be held back due to compatibility issues such as the presence of SenseShield Technology code-obfuscation drivers. The transition to newer software versions is critical to maintaining security, as unsupported products become increasingly vulnerable to emerging threats. Microsoft has also introduced new tools, such as Windows Backup for Organizations, to facilitate smoother migrations and ensure business continuity. The company emphasizes the importance of timely upgrades to minimize operational and security risks associated with unsupported software. These EOL milestones represent the culmination of nearly a decade of service for several Microsoft products, underscoring the need for proactive IT planning. Organizations that have not yet migrated are urged to act quickly to avoid exposure to unpatched vulnerabilities. The coordinated end-of-support for multiple products may require significant resource allocation and careful scheduling to ensure seamless transitions. Microsoft’s guidance and new migration tools are designed to support enterprises through this period of change, but the responsibility for timely action rests with IT leaders. Failure to upgrade could result in compliance issues, increased attack surface, and potential business disruptions. The end-of-life announcements serve as a critical reminder of the ongoing lifecycle management required for enterprise software environments.
Jun 29, 2026
Microsoft is warning organizations that **Windows Server 2016**, **Windows 10 Enterprise LTSB 2016**, and **Windows 10 IoT Enterprise 2016 LTSB** are approaching end of support, after which they will no longer receive security patches, bug fixes, or technical support. Reported lifecycle dates include **October 13, 2026** for the Windows 10 2016 LTSB variants and **January 12, 2027** for Windows Server 2016; Microsoft’s guidance is to prioritize upgrades (e.g., to **Windows Server 2025** and Windows 10/11 LTSC options where hardware permits) and, if migration timelines slip, to use the **Extended Security Updates (ESU)** program as a short-term bridge for up to three years with only “critical” and “important” security updates. Separately, Microsoft released the **Windows 11 KB5077241** optional (non-security) preview cumulative update with 29 quality changes, including **BitLocker reliability** improvements (addressing freezes after entering a recovery key) and new built-in capabilities such as a taskbar **network speed test** and **native Sysmon functionality** (disabled by default). The update also enables **Quick Machine Recovery (QMR)** by default on certain unmanaged Windows Pro devices and is positioned for admin testing ahead of the next Patch Tuesday release, but it does **not** include security fixes.
Jun 29, 2026
Microsoft said the **Extended Security Update (ESU)** program for **Exchange Server 2016** and **Exchange Server 2019** will end in **October 2026** with no further extension. The notice follows Microsoft's April announcement of a second ESU period, a six-month continuation after both on-premises Exchange versions had already reached end of support, confirming that customers relying on legacy deployments now face a fixed deadline for receiving security patches. Microsoft is urging organizations to move to **Exchange Server Subscription Edition (SE)** or migrate to **Exchange Online** as support winds down. The company’s lifecycle guidance and follow-up reporting indicate that Exchange 2019 customers can perform an in-place upgrade to Exchange Server SE in a process similar to installing a cumulative update, while Exchange 2016 customers must plan a broader migration path before security coverage ends.
Jul 22, 2026