Loading story…
A significant proportion of enterprise assets are currently running end-of-life (EOL) operating systems, posing a growing security risk as these systems no longer receive regular feature updates or bug fixes. According to research conducted by runZero, 8.56% of assets across hundreds of U.S. enterprises are operating on EOL systems, with 5% already beyond extended support and thus missing critical security patches. The prevalence of these unsupported systems is particularly high in industries such as retail, machinery, electronics manufacturing, healthcare, and social services, where legacy applications are often essential for core business functions. In healthcare and social services, the use of unsupported operating systems can directly impact patient safety due to their integration with critical care applications. The situation is set to worsen dramatically with the upcoming end-of-life date for Windows 10 on October 14, 2025. After this date, approximately one-third of all enterprise Windows assets will lose official support, causing the overall percentage of EOL systems in enterprises to surge from 5% to around 16%. This transition, referred to as the 'Winpocalypse,' will disproportionately affect sectors already struggling with legacy dependencies, especially healthcare and social services, which are expected to see the steepest increases in exposure. Many organizations remain reliant on Windows 10 and earlier versions due to business-critical applications that cannot be easily migrated or upgraded. The persistence of these 'undead' systems is often due to forgotten servers or specialized equipment, such as medical devices, that are incompatible with newer operating systems. Attackers exploit these vulnerabilities by using network reconnaissance to identify and compromise outdated systems, which are often overlooked in standard security assessments. Internet scans reveal only a portion of the risk, as many legacy systems are not directly exposed but remain accessible to attackers who have breached the network perimeter. Security experts emphasize the need for organizations to establish a baseline inventory of EOL systems and to assess their unique risk profiles, rather than assuming complete eradication of unsupported assets is feasible. The looming Windows 10 deadline has prompted renewed calls for enterprises to accelerate migration plans and to implement compensating controls where immediate upgrades are not possible. Failure to address the growing population of EOL systems will significantly expand the attack surface available to cybercriminals, increasing the likelihood of successful breaches. The research underscores the urgency for proactive asset management, regular vulnerability assessments, and strategic planning to mitigate the risks associated with legacy operating systems. Organizations are advised to prioritize the replacement or isolation of unsupported systems, especially those integral to critical business operations. The findings highlight the intersection of operational necessity and cybersecurity risk, illustrating the complex challenges enterprises face in balancing legacy support with modern security requirements. As the Windows 10 end-of-life approaches, the need for comprehensive risk management strategies becomes ever more pressing for organizations across all sectors.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
Microsoft announced that Windows 10 support ended on 2025-10-14 and said Office 2016 and Office 2019 also reached end of support that day. It added that newer perpetual Office versions may still run on Windows 10 but will no longer be supported on that configuration, and urged customers to move to Windows 11 or Microsoft 365.
Dark Reading published coverage describing how outdated and unsupported operating systems continue to remain active across enterprise environments, emphasizing the security challenges they create. The article reflects broader reporting on the persistence of legacy systems as a current enterprise risk.
runZero published new research highlighting the security risks posed by legacy and end-of-life assets in enterprise networks. The report frames unsupported systems as an ongoing exposure and calls attention to their prevalence in modern environments.
Microsoft lifecycle guidance stated that Windows 10 version 22H2 is the final feature update supported through 2025-10-14 and added that paid Extended Security Updates will be available after end of support. The guidance also reiterated that unsupported Windows versions no longer receive security patches or technical assistance.
Microsoft announced that Windows 10 version 21H2 Enterprise, Enterprise multi-session, and Education editions would reach end of updates on 2024-06-11. After that date, those editions would no longer receive monthly security and preview updates.
6 references tracked. Mallory keeps watching after this page renders.
support.microsoft.com
Open sourcesupport.microsoft.com
Open sourcerunzero.com
Open sourcedarkreading.com
Open sourcewindows.microsoft.com
Open sourcelearn.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is ending support for Windows 10 on October 14, 2025, marking a significant transition for millions of users and organizations worldwide. After this date, Windows 10 devices will no longer receive free security updates, leaving them potentially vulnerable to newly discovered threats. The end-of-life (EOL) status does not mean that Windows 10 systems will immediately stop functioning, but it does introduce a gradual increase in risk as unpatched vulnerabilities accumulate. Security experts warn that the real danger emerges when new security flaws are discovered and Microsoft chooses not to release patches for the EOL operating system, potentially resulting in 'forever-day' vulnerabilities. Users and IT administrators are urged to take proactive steps, as doing nothing is not considered a safe option. Microsoft is offering Extended Security Updates (ESUs) for Windows 10 on a subscription basis, allowing organizations and individuals to continue receiving security patches for up to three additional years, though these updates will not be free for most users. There are also some new ways to obtain security updates for an extra year at no cost, but eligibility and availability may vary. For those unable to upgrade to Windows 11 due to hardware incompatibility, Microsoft will block upgrades through Windows Update and encourage the purchase of new, compatible devices. The transition is expected to impact not only businesses but also consumers with older, yet still functional, PCs. IT professionals are reminded of the extensive efforts and costs involved in past transitions, such as Y2K, and are cautioned that while a catastrophic event is unlikely, the risks associated with unsupported systems are real and will increase over time. The EOL of Windows 10 is being compared to Y2K in terms of the scale of preparation required, though the nature of the risk is different, with a slow buildup of vulnerabilities rather than an immediate crisis. Organizations are advised to assess their device inventories, plan for upgrades or replacements, and consider ESU subscriptions where necessary. The looming deadline has prompted increased warning messages from Microsoft, urging users to act before support ends. Security researchers emphasize that the persistence of EOL systems in the environment could create long-term security challenges. The overall consensus is that while the transition may not result in immediate widespread disruption, the cumulative effect of unpatched vulnerabilities could pose significant risks if not managed properly. The end of Windows 10 support is a critical event for the IT and security community, requiring careful planning and timely action to mitigate potential threats.
Jun 29, 2026
Enterprise fleets still running Windows 10 are carrying significantly higher security risk than Windows 11 systems after Microsoft ended support for Windows 10 on 14 October 2025. Data cited from Lansweeper shows Windows 10 still accounts for **16.9%** of Windows client devices, while Windows 11 has reached **78.8%** adoption, yet Windows 10 endpoints average **1,903 active CVEs** per device compared with **652** on Windows 11. About **66.6%** of Windows 10 vulnerabilities are rated high or critical, and **2.4%** are known to be actively exploited, with exploitability reported as **1.7 times higher** than on Windows 11. The exposure is concentrated in organizations and sectors where migration has lagged, particularly SMBs and industries with long-lived or specialized hardware such as **healthcare and pharmaceuticals, retail, and manufacturing**. Researchers said hardware incompatibility is not the main barrier to upgrading, while nearly one-fifth of monitored Windows devices still run end-of-life operating systems including **Windows 7, Windows 8.1, and Windows XP**. Although Microsoft offers Extended Security Updates as a temporary bridge for some Windows 10 users, coverage is limited and consumer ESU expires on **12 October 2027**, leaving organizations facing growing operational, compliance, insurance, and regulatory risk if legacy systems remain in production.
Jul 20, 2026
Microsoft has announced the end-of-life (EOL) for several widely used software products, including Windows 10, Office 2016, Office 2019, Exchange Server 2016, and Exchange Server 2019, marking a significant transition for organizations relying on these platforms. The final security updates for Office 2016 and Office 2019 will be released this month, after which these products will no longer receive security patches or technical support. Organizations are strongly encouraged to migrate to newer versions such as Office 2024 or Office LTSC 2024, which will be supported through October 2029, or to adopt Microsoft 365 Apps for ongoing feature and security updates. The end of support for Exchange Server 2016 and 2019 is closely linked to Office upgrades, with Microsoft recommending migration to Exchange Online or the subscription edition for continued security and compliance. For Windows 11, Microsoft has issued reminders that the Home and Pro editions of version 23H2 will reach end of servicing on November 11, 2025, after which they will no longer receive monthly security or preview updates. Enterprise, Education, and IoT Enterprise editions of Windows 11 23H2 will remain supported until November 2026, providing organizations with additional time to plan migrations. Users are advised to upgrade to Windows 11 24H2 or later, with automatic updates available for unmanaged devices, though some systems may be held back due to compatibility issues such as the presence of SenseShield Technology code-obfuscation drivers. The transition to newer software versions is critical to maintaining security, as unsupported products become increasingly vulnerable to emerging threats. Microsoft has also introduced new tools, such as Windows Backup for Organizations, to facilitate smoother migrations and ensure business continuity. The company emphasizes the importance of timely upgrades to minimize operational and security risks associated with unsupported software. These EOL milestones represent the culmination of nearly a decade of service for several Microsoft products, underscoring the need for proactive IT planning. Organizations that have not yet migrated are urged to act quickly to avoid exposure to unpatched vulnerabilities. The coordinated end-of-support for multiple products may require significant resource allocation and careful scheduling to ensure seamless transitions. Microsoft’s guidance and new migration tools are designed to support enterprises through this period of change, but the responsibility for timely action rests with IT leaders. Failure to upgrade could result in compliance issues, increased attack surface, and potential business disruptions. The end-of-life announcements serve as a critical reminder of the ongoing lifecycle management required for enterprise software environments.
Jun 29, 2026