end-of-life-softwarewidely-deployed-product-advisory

Windows Server 2012 and 2012 R2 Lose Support, Leaving Systems Without Security Updates

Attack Surface Exposure · 2 sources · Updated 3mo ago · First seen May 5, 2023

Microsoft ended support for Windows Server 2012 and Windows Server 2012 R2 on October 10, 2023, leaving the platforms without further security updates, bug fixes, technical support, or refreshed online technical content. The change affects organizations still running the legacy server operating systems, which now face increased exposure if they continue operating unsupported workloads.

Microsoft and national incident response guidance urged organizations to migrate to newer releases such as Windows Server 2022 or enroll in Extended Security Updates (ESU) where upgrades cannot yet be completed. ESU is available at no additional cost for eligible Azure deployments, while on-premises customers must purchase it and can renew coverage annually through October 13, 2026.

Is this exposed in your estate?Map this exposure pattern across your cloud, code, and identities.

Map your surface

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · May 5, 2023

May 5, 20233y ago
Windows Server 2012 and 2012 R2 reach end of support
Support for Windows Server 2012 and Windows Server 2012 R2 ended on this date. Afterward, the products no longer received security updates, non-security updates, bug fixes, technical support, or online technical content updates.
Windows Server 2012 and 2012 R2 reaching end of support - Microsoft Lifecycle | Microsoft Learn
May 5, 20233y ago
Microsoft announces end of support for Windows Server 2012 and 2012 R2
Microsoft published a lifecycle announcement stating that support for Windows Server 2012 and Windows Server 2012 R2 would end on October 10, 2023, and outlined Extended Security Updates as a mitigation path.
Windows Server 2012 and 2012 R2 reaching end of support - Microsoft Lifecycle | Microsoft Learn

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Affected products

2 linked

Windows Server 2012Windows Server 2012 R2

Do you run this?See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.

See Where You're Exposed

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Csirt SkNews · Mar 25, 2024

Koniec podpory pre Windows Server 2012 a Windows Server 2012 R2 | CSIRT.SKOpen source ↗

Learn MicrosoftNews · May 5, 2023

Windows Server 2012 and 2012 R2 reaching end of support - Microsoft Lifecycle | Microsoft LearnOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Windows Server 2012 and 2012 R2 Lose Support, Leaving Systems Without Security Updates

How this story unfolded

Windows Server 2012 and 2012 R2 reach end of support

Microsoft announces end of support for Windows Server 2012 and 2012 R2

Related entities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Windows Server 2022 Enters Extended Support, With Security Updates Continuing to 2031

End-of-Life Announcements for Multiple Microsoft Products and Services

Microsoft Windows lifecycle and update changes affecting Windows 10/Server 2016 and Windows 11

Windows Server 2012 and 2012 R2 Lose Support, Leaving Systems Without Security Updates

How this story unfolded

Windows Server 2012 and 2012 R2 reach end of support

Microsoft announces end of support for Windows Server 2012 and 2012 R2

Related entities

Affected products

Sources

See the full picture, correlated to your attack surface.

Related stories

Windows Server 2022 Enters Extended Support, With Security Updates Continuing to 2031

End-of-Life Announcements for Multiple Microsoft Products and Services

Microsoft Windows lifecycle and update changes affecting Windows 10/Server 2016 and Windows 11