Loading story…
Microsoft has announced that it will provide free Extended Security Updates (ESU) for Windows 10 users in the European Economic Area (EEA), which includes all 27 European Union member states as well as Iceland, Liechtenstein, and Norway. This move comes as Windows 10 approaches its end-of-life date on October 14, 2025, after which regular security updates would typically cease. Previously, Microsoft had offered ESUs to enterprise customers and, more recently, to home users for a fee or in exchange for syncing PC settings with OneDrive. However, this approach was criticized by consumer advocacy groups, particularly Euroconsumers, for potentially violating the EU's Digital Markets Act (DMA) by tying essential security updates to the use of Microsoft's own services. In response to mounting regulatory and consumer pressure, Microsoft has now removed all conditions, making ESUs completely free for all users in the EEA without requiring the use of OneDrive, Microsoft Rewards, or any other Microsoft service. Euroconsumers, which represents 1.5 million households across Europe and Brazil, played a key role in advocating for this change and continues to push for an extension of ESU availability beyond October 2026. Microsoft has stated that the enrollment process for ESUs in the EEA will be updated to meet local expectations and ensure a secure, streamlined experience for users. The company aims to support customers as they transition to Windows 11, but the free ESU offer is intended to provide uninterrupted security coverage for those who remain on Windows 10. This decision marks a significant shift in Microsoft's policy, as it is the first time ESUs are being offered to home users at no cost and without strings attached in a major market. The move is widely seen as a response to regulatory scrutiny and consumer advocacy rather than a voluntary corporate initiative. While Microsoft has not publicly confirmed all details, statements from Euroconsumers and confirmations to media outlets indicate that the free ESU program is a direct result of compliance concerns with the DMA. The development is expected to benefit millions of Windows 10 users in Europe, ensuring continued protection against security threats even after the official end-of-support date. Consumer groups are now urging Microsoft to further extend the duration of free ESUs to match the extended support periods previously granted to older Windows versions. The change is also likely to influence how other technology vendors approach end-of-life support in regulated markets. Microsoft's decision underscores the growing impact of European digital regulations on global technology companies and their product lifecycle policies.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Microsoft decided to make Windows 10 Extended Security Updates free for users in the European Economic Area, a change multiple reports said was driven by regulatory pressure in Europe. The move affects post-end-of-support security update access for Windows 10 users in that region.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
7 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcecsirt.sk
Open sourcesupport.microsoft.com
Open sourcelearn.microsoft.com
Open sourcesecurityonline.info
Open sourcenews.risky.biz
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is ending official support for Windows 10 on October 14, 2025, which will leave millions of devices without free security updates unless users take specific actions. After this date, Microsoft will no longer provide free security patches for Windows 10, and users with devices that do not meet the hardware requirements for Windows 11 will be unable to upgrade through standard channels. Microsoft is offering Extended Security Updates (ESUs) for Windows 10, which will be available on a subscription basis for up to three years, allowing users to continue receiving critical security patches. The cost of these ESUs will vary, and while most users worldwide will need to pay for this service, Microsoft has made an exception for customers in the European Economic Area (EEA). Due to regulatory pressure and advocacy from consumer groups, Microsoft will provide an extra year of free security updates to EEA users, provided they enroll in the ESU program and verify their accounts every 60 days. This move is intended to align with the Digital Markets Act and meet local expectations for consumer protection. Users who do not act risk running unsupported systems, which could expose them to significant security vulnerabilities. Microsoft is not planning to extend the Windows 10 support deadline or relax the hardware requirements for Windows 11, so affected users must choose from several options: purchasing a new PC, enrolling in the ESU program, or exploring alternative operating systems. The ESU program is designed to provide a secure and streamlined experience for those who need more time to transition to Windows 11. Microsoft has also communicated that doing nothing is not a safe option, as unsupported systems will become increasingly vulnerable over time. The company has provided guidance for both individuals and organizations on how to enroll in the ESU program and what to expect in terms of ongoing support. The end of Windows 10 support is expected to impact not only businesses but also consumers with older, yet still functional, hardware. Microsoft’s approach underscores the importance of timely upgrades and proactive security planning for all Windows users. The transition period will require careful management, especially for organizations with large fleets of Windows 10 devices. Security experts recommend evaluating upgrade paths and support options as soon as possible to avoid disruptions and maintain compliance with security best practices. The availability of free updates in the EEA highlights the influence of regional regulations on global technology vendors and may set a precedent for future end-of-support scenarios.
Jun 29, 2026
Microsoft has extended the **consumer** Windows 10 Extended Security Updates (ESU) program by an additional year, allowing enrolled personal devices running Windows 10 `22H2` to continue receiving critical and important security updates until **October 12, 2027**. The change appeared in updated Microsoft documentation rather than a formal announcement, and applies to home-user systems after Windows 10 reached end of support in October 2025. Microsoft said users already enrolled in consumer ESU will receive the extension automatically with no further action required. Enrollment remains available through a Microsoft account settings sync, **1,000 Microsoft Rewards points**, or a **$30** one-time fee, while eligibility is limited to personal devices and excludes domain-joined or MDM-managed systems. The extension preserves access to monthly security fixes, including updates such as Secure Boot certificate-related patches, for users who have not yet migrated to Windows 11.
Sep 3, 2026
Microsoft has introduced the Windows 10 Extended Security Updates (ESU) program, allowing eligible consumer users to receive an additional year of security updates after official support for Windows 10 ended. The ESU can be accessed for free by using Windows Backup, redeeming Microsoft Rewards points, or through a one-time purchase, with special provisions for users in the European Economic Area. The program is limited to up to 10 devices per user and is not available for corporate or commercial licenses, requiring devices to run at least version 22H2 and be linked to an administrator Microsoft account. Following the October 2025 updates, a bug has caused some Windows 10 systems—including those enrolled in the ESU program and those running supported LTSC editions—to display incorrect end-of-support warnings. Microsoft clarified that this is a cosmetic issue and does not affect the delivery of security updates. A cloud configuration update has been deployed to address the erroneous messages, but some devices may require manual intervention using Group Policy and Known Issue Rollback. A permanent fix is planned for a future Windows update.
Jun 29, 2026