Loading story…
Microsoft has issued enterprise evaluation ISOs for Windows 11 version 26H2 and placed the release in the Release Preview Channel, indicating that broader availability is approaching. The release is intended to renew the Windows 11 servicing lifecycle: support for Windows 11 24H2 Home and Pro ends on October 13, 2026, while 25H2 Home and Pro support ends on October 12, 2027.
Version 26H2 retains the Germanium servicing branch and underlying codebase used by 24H2 and 25H2 rather than introducing a new platform. Fully updated, eligible 24H2 and 25H2 devices are expected to receive it through a small enablement package requiring one restart, reducing deployment time and limiting application and hardware compatibility risk because the releases share fixes, testing, and update packages.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft placed Windows 11 version 26H2 in the Release Preview Channel, signaling that the release was approaching public availability.
Microsoft quietly released enterprise evaluation ISOs for Windows 11 26H2, enabling IT administrators to test application, driver, and tool compatibility before deployment.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft warned that **Windows 11 version 24H2** will stop receiving updates for **Home, Pro, Pro Education, and Pro for Workstations** editions on **October 13, 2026**. After that date, affected systems will no longer get monthly security patches or non-security preview updates, leaving devices more exposed to newly disclosed vulnerabilities and malware. Microsoft said **Windows 10 Enterprise LTSB 2016** will also reach the end of support on the same date. Microsoft is directing customers to upgrade eligible devices to **Windows 11 version 25H2**, which is already generally available and remains supported for those editions until **October 12, 2027**. The company said unmanaged Windows 11 24H2 Home and Pro devices will be automatically moved to 25H2, while **Windows 11 24H2 Enterprise and Education** editions will continue under support until **October 2027**, creating a longer support window for those business-focused releases.
Aug 21, 2026
Microsoft has officially announced the rollout of Windows 11 25H2, marking a significant update to its operating system with a focus on security improvements and a more efficient installation process. The update is being gradually released to both individual users and organizations, with the option to manually install it or wait for it to become available through standard update channels. Unlike previous annual updates, Windows 11 25H2 is designed to be ultra-compact, utilizing enablement packages (eKB) that are less than 200KB in size, allowing for a single-restart installation and minimizing downtime. This streamlined approach swaps out only the necessary files rather than replacing the entire system, resulting in a faster and more reliable update experience. Both Windows 11 25H2 and 24H2 now share the same code base, ensuring that they will receive identical cumulative updates, features, and fixes moving forward, though some features are exclusive to the 25H2 version. A key highlight of the 25H2 update is the introduction of significant advancements in build and runtime vulnerability detection, as well as the implementation of AI-assisted secure coding, which aims to proactively address and mitigate security threats within Microsoft’s software and services. For enterprise environments, the update brings support for Wi-Fi 7 and introduces an optional feature that allows IT administrators to remove select pre-installed Microsoft Store apps via Group Policy, enhancing customization and security posture. The update also removes legacy components such as PowerShell 2.0 and the Windows Management Instrumentation command-line (WMIC), reducing the attack surface and aligning with modern security standards. Microsoft emphasizes that these changes are part of its Secure Future Initiative, reflecting a broader commitment to improving the security and reliability of its platforms. The update resets the support lifecycle, granting another 36 months of support for Enterprise and Education editions, which is particularly relevant for organizations planning long-term deployments. While the update does not introduce major new features for consumers, its focus on security, stability, and manageability is expected to benefit both end users and IT departments. Microsoft advises that most users will not see the update immediately due to the gradual rollout, but it will become widely available through Windows Server Update Services (WSUS) by mid-October. The company also provides tools such as the Installation Assistant for those who wish to expedite the upgrade process. Overall, Windows 11 25H2 represents a strategic step forward in Microsoft’s efforts to deliver a secure, efficient, and manageable operating system for both consumers and enterprises.
Jun 29, 2026
Microsoft began rolling out **Windows 11 preview updates** for versions **25H2 and 24H2** (including the optional non-security preview update `KB5074105` and Release Preview builds `26200.7701`/`26100.7701`) focused on functionality, performance, and reliability improvements rather than patching new security vulnerabilities. The updates emphasize expanded **AI-driven experiences** (including refinements to Copilot+ PC-related models and more natural-language assistance within Settings), along with usability changes and a simplified Windows update title format intended to reduce administrative friction in tools like **WSUS** and **Microsoft Configuration Manager**. Alongside these feature updates, Microsoft highlighted an operational security risk: **Windows Secure Boot certificates** used by most Windows devices are expected to begin expiring in **June 2026**, and organizations that do not update Certificate Authority (CA) material in time may face devices that cannot boot securely. Separately, consumer guidance circulated on bypassing Windows 11 hardware eligibility checks (notably **TPM 2.0** requirements) to upgrade “unsupported” PCs; while this may extend device usability after Windows 10 support ended, it can also undermine Microsoft’s intended security baseline and increase enterprise risk if adopted outside controlled policy.
Jun 29, 2026