Loading story…
Microsoft is ending official support for Windows 10 on October 14, 2025, which will leave millions of devices without free security updates unless users take specific actions. After this date, Microsoft will no longer provide free security patches for Windows 10, and users with devices that do not meet the hardware requirements for Windows 11 will be unable to upgrade through standard channels. Microsoft is offering Extended Security Updates (ESUs) for Windows 10, which will be available on a subscription basis for up to three years, allowing users to continue receiving critical security patches. The cost of these ESUs will vary, and while most users worldwide will need to pay for this service, Microsoft has made an exception for customers in the European Economic Area (EEA). Due to regulatory pressure and advocacy from consumer groups, Microsoft will provide an extra year of free security updates to EEA users, provided they enroll in the ESU program and verify their accounts every 60 days. This move is intended to align with the Digital Markets Act and meet local expectations for consumer protection. Users who do not act risk running unsupported systems, which could expose them to significant security vulnerabilities. Microsoft is not planning to extend the Windows 10 support deadline or relax the hardware requirements for Windows 11, so affected users must choose from several options: purchasing a new PC, enrolling in the ESU program, or exploring alternative operating systems. The ESU program is designed to provide a secure and streamlined experience for those who need more time to transition to Windows 11. Microsoft has also communicated that doing nothing is not a safe option, as unsupported systems will become increasingly vulnerable over time. The company has provided guidance for both individuals and organizations on how to enroll in the ESU program and what to expect in terms of ongoing support. The end of Windows 10 support is expected to impact not only businesses but also consumers with older, yet still functional, hardware. Microsoft’s approach underscores the importance of timely upgrades and proactive security planning for all Windows users. The transition period will require careful management, especially for organizations with large fleets of Windows 10 devices. Security experts recommend evaluating upgrade paths and support options as soon as possible to avoid disruptions and maintain compliance with security best practices. The availability of free updates in the EEA highlights the influence of regional regulations on global technology vendors and may set a precedent for future end-of-support scenarios.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Microsoft established October 14, 2025 as the date when standard support and regular security updates for Windows 10 would end, creating the deadline referenced by later coverage about upgrade and update options.
On September 30, 2025, coverage emphasized that users unable to upgrade eligible Windows 10 systems had roughly two weeks left before support ended, outlining available paths such as upgrading, replacing devices, or obtaining extended security updates.
By late September 2025, Microsoft announced an extension or expanded availability of Windows 10 security updates for customers in the European Economic Area, giving some users an option to continue receiving protections beyond the normal support cutoff.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is ending support for Windows 10 on October 14, 2025, marking a significant transition for millions of users and organizations worldwide. After this date, Windows 10 devices will no longer receive free security updates, leaving them potentially vulnerable to newly discovered threats. The end-of-life (EOL) status does not mean that Windows 10 systems will immediately stop functioning, but it does introduce a gradual increase in risk as unpatched vulnerabilities accumulate. Security experts warn that the real danger emerges when new security flaws are discovered and Microsoft chooses not to release patches for the EOL operating system, potentially resulting in 'forever-day' vulnerabilities. Users and IT administrators are urged to take proactive steps, as doing nothing is not considered a safe option. Microsoft is offering Extended Security Updates (ESUs) for Windows 10 on a subscription basis, allowing organizations and individuals to continue receiving security patches for up to three additional years, though these updates will not be free for most users. There are also some new ways to obtain security updates for an extra year at no cost, but eligibility and availability may vary. For those unable to upgrade to Windows 11 due to hardware incompatibility, Microsoft will block upgrades through Windows Update and encourage the purchase of new, compatible devices. The transition is expected to impact not only businesses but also consumers with older, yet still functional, PCs. IT professionals are reminded of the extensive efforts and costs involved in past transitions, such as Y2K, and are cautioned that while a catastrophic event is unlikely, the risks associated with unsupported systems are real and will increase over time. The EOL of Windows 10 is being compared to Y2K in terms of the scale of preparation required, though the nature of the risk is different, with a slow buildup of vulnerabilities rather than an immediate crisis. Organizations are advised to assess their device inventories, plan for upgrades or replacements, and consider ESU subscriptions where necessary. The looming deadline has prompted increased warning messages from Microsoft, urging users to act before support ends. Security researchers emphasize that the persistence of EOL systems in the environment could create long-term security challenges. The overall consensus is that while the transition may not result in immediate widespread disruption, the cumulative effect of unpatched vulnerabilities could pose significant risks if not managed properly. The end of Windows 10 support is a critical event for the IT and security community, requiring careful planning and timely action to mitigate potential threats.
Jun 29, 2026
Microsoft has announced that it will provide free Extended Security Updates (ESU) for Windows 10 users in the European Economic Area (EEA), which includes all 27 European Union member states as well as Iceland, Liechtenstein, and Norway. This move comes as Windows 10 approaches its end-of-life date on October 14, 2025, after which regular security updates would typically cease. Previously, Microsoft had offered ESUs to enterprise customers and, more recently, to home users for a fee or in exchange for syncing PC settings with OneDrive. However, this approach was criticized by consumer advocacy groups, particularly Euroconsumers, for potentially violating the EU's Digital Markets Act (DMA) by tying essential security updates to the use of Microsoft's own services. In response to mounting regulatory and consumer pressure, Microsoft has now removed all conditions, making ESUs completely free for all users in the EEA without requiring the use of OneDrive, Microsoft Rewards, or any other Microsoft service. Euroconsumers, which represents 1.5 million households across Europe and Brazil, played a key role in advocating for this change and continues to push for an extension of ESU availability beyond October 2026. Microsoft has stated that the enrollment process for ESUs in the EEA will be updated to meet local expectations and ensure a secure, streamlined experience for users. The company aims to support customers as they transition to Windows 11, but the free ESU offer is intended to provide uninterrupted security coverage for those who remain on Windows 10. This decision marks a significant shift in Microsoft's policy, as it is the first time ESUs are being offered to home users at no cost and without strings attached in a major market. The move is widely seen as a response to regulatory scrutiny and consumer advocacy rather than a voluntary corporate initiative. While Microsoft has not publicly confirmed all details, statements from Euroconsumers and confirmations to media outlets indicate that the free ESU program is a direct result of compliance concerns with the DMA. The development is expected to benefit millions of Windows 10 users in Europe, ensuring continued protection against security threats even after the official end-of-support date. Consumer groups are now urging Microsoft to further extend the duration of free ESUs to match the extended support periods previously granted to older Windows versions. The change is also likely to influence how other technology vendors approach end-of-life support in regulated markets. Microsoft's decision underscores the growing impact of European digital regulations on global technology companies and their product lifecycle policies.
Jul 23, 2026
Microsoft has introduced the Windows 10 Extended Security Updates (ESU) program, allowing eligible consumer users to receive an additional year of security updates after official support for Windows 10 ended. The ESU can be accessed for free by using Windows Backup, redeeming Microsoft Rewards points, or through a one-time purchase, with special provisions for users in the European Economic Area. The program is limited to up to 10 devices per user and is not available for corporate or commercial licenses, requiring devices to run at least version 22H2 and be linked to an administrator Microsoft account. Following the October 2025 updates, a bug has caused some Windows 10 systems—including those enrolled in the ESU program and those running supported LTSC editions—to display incorrect end-of-support warnings. Microsoft clarified that this is a cosmetic issue and does not affect the delivery of security updates. A cloud configuration update has been deployed to address the erroneous messages, but some devices may require manual intervention using Group Policy and Known Issue Rollback. A permanent fix is planned for a future Windows update.
Jun 29, 2026