Microsoft: Outdated Windows devices will stop receiving security updates October 9, 2026 Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. To ensure devices keep receiving updates, admins and users must upgrade to a supported version of Windows before the Windows Update certificates expire in May and June 2027. "As a standard security practice, these certificates have an expiration date. This means that they eventually need to be rotated (that is, replaced by new certificates). A set of these certificates will expire on May 17, 2027 and June 19, 2027," Microsoft said on Thursday. It also added that devices on unsupported versions of Windows "will lose access to Windows Update services and won't receive any updates as a result" and recommended "upgrading to a supported version of Windows client or server ." In a separate Microsoft 365 Message Center update , it also noted that replacement certificates have already been delivered to systems running a supported Windows version and don't require additional action if they're up to date. Microsoft shared the following detailed guidance on the required actions by Windows version: Windows 11, version 25H2 and later: No action is required. Windows 11, version 24H2 and Windows Server 2025: Install the September 2025 security update or later before June 19, 2027. Other supported versions of Windows 11, Windows Server 2022, and Windows 10: Install the July 2026 security update or later before June 19, 2027. Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Install the July 2026 security update or later before May 17, 2027. Other Windows versions: Upgrade to a supported version of Windows client or Windows Server. Microsoft advised IT administrators to identify all devices running older or unsupported Windows versions before the Windows Update certificate rotation in 2027. They should also deploy monthly Windows updates on all supported devices to keep them up to date and create an upgrade plan for unsupported devices before May and June 2027. "And if you do need to act on older device populations, there's still time! Review, update, and plan upgrades for unsupported versions before the May 2027 or June 2027 certificate expiration dates," it added. However, this doesn't apply to devices that receive updates from Windows Server Update Services (WSUS), which downloads updates and distributes them across enterprise networks. Last month, Microsoft released Windows 11, version 26H2 (also known as the Windows 11 2026 Update), which is now generally available for eligible Windows 11 24H2 and 25H2 systems as a small enablement package (instead of a full OS replacement) in a phased rollout that will expand over the next few months. Build your security blueprint for AI-powered attacks Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed. Related Articles: Windows 11 cumulative updates KB5124008 & KB5122880 released Microsoft asks users to ignore 'Antivirus is turned off' errors Windows 11 KB5120998 update released with 35 changes and fixes Critical RCE flaw in Windows IKE Extension now actively exploited Microsoft: Windows KB5124010 update crashes some games and apps

Previous Article Gisabun - 1 day ago No mention of Windows 10 Home & Pro which recently got another year of security only support that does in a year. No mention of Windows 10 Home & Pro which recently got another year of security only support that does in a year. 2022computerissues - 16 hours ago "Windows 10: Install the July 2026 security update or later before June 19, 2027." People on Win10 ESU will have that update. "Windows 10: Install the July 2026 security update or later before June 19, 2027." People on Win10 ESU will have that update. Not a member yet? Register Now You may also like: Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks FBI disrupts Chinese hacking tools used to breach critical infrastructure FBI disrupts Chinese hacking tools used to breach critical infrastructure Low-cost Android phones ship with residential proxy malware Low-cost Android phones ship with residential proxy malware Free Identity Governance for up to 150 Users: Try Our Community Edition Free Identity Governance for up to 150 Users: Try Our Community Edition Move from visibility to action with AITEM, Criminal IP’s next evolution of ASM Move from visibility to action with AITEM, Criminal IP’s next evolution of ASM AWS saw a valid key and let the agent clear a production bucket. See how Token Security ties each agent to its owner and limits it to read-only access. AWS saw a valid key and let the agent clear a production bucket. See how Token Security ties each agent to its owner and limits it to read-only access. Is your backup really out of reach? See what the latest attacks reveal. Is your backup really out of reach? See what the latest attacks reveal. New OAuth risk analyst agent: Turn 45 minutes of manual review into 15 seconds. New OAuth risk analyst agent: Turn 45 minutes of manual review into 15 seconds. Learn how to evaluate RMM security with eight practical tests. Find gaps before scaling endpoint management across customer environments. Learn how to evaluate RMM security with eight practical tests. Find gaps before scaling endpoint management across customer environments.