Patch/Configuration Management Microsoft extends free Windows 10 security updates for consumers June 25, 2026 Share By SC Staff Microsoft has extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to receive security updates until October 12, 2027. This change was made without a formal announcement, appearing instead in updates to Microsoft's ESU documentation and an editor's note to a Windows Experience Blog post, according to a recent report by Bleeping Computer. The extension provides users with more time to transition to a new Windows 11 PC while continuing to receive critical security updates. Windows 10 officially reached its end of support on October 14, 2025, meaning Microsoft no longer provides technical support, feature updates, or security updates for the operating system, except for specific LTSC versions. Originally, Microsoft offered consumers a free ESU program that was set to expire on October 12, 2026. For enterprise customers, the ESU program was available for up to three years at a cost. With this quiet update, the free consumer ESU program now runs through October 12, 2027. Consumers can continue to receive these extended security updates for free by backing up their Windows settings to their Microsoft account, redeeming 1,000 Microsoft reward points, or for users in the European Economic Area, by logging into Windows 10 with a Microsoft account. An ESU license can be used on up to 10 devices linked to the same Microsoft account. The program is intended for personal devices and is not available for systems managed through Active Directory or Mobile Device Management, though Microsoft Entra-registered devices are eligible. Source: Bleeping Computer SC Staff Related Vulnerability Management Max severity Joomla Content Editor extension flaw targeted in automated attacks Laura French June 17, 2026 The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day deadline. Network Security Three critical FortiSandbox bugs rated 9.8 actively exploited Steve Zurier June 16, 2026 Active exploitation of FortiSandbox flaws prompt urgent patching calls from security experts. Vulnerability Management PAN-OS GlobalProtect bug actively exploited, added to CISA’s KEV list Steve Zurier June 15, 2026 Unit 42 says exploited PAN-OS GlobalProtect flaw remains a VPN risk despite patches. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bug Buffer Overflow Disassembly You can skip this ad in 5 seconds