Microsoft Announces Security Update Halt for Unsupported Windows Devices
Certificate rotation next year will block security updates on legacy systems
Key Takeaways
- Microsoft will stop delivering security updates to unsupported Windows devices after next year's certificate rotation.
- The change affects legacy Windows versions that can no longer verify update authenticity.
- Users are advised to upgrade to a supported Windows version to continue receiving patches.
- No direct exploitation has been reported, but the loss of updates increases vulnerability risk.
- Organizations should audit their Windows fleet and plan upgrades to supported versions.
Quick answers
- What happened?
- Microsoft has warned that devices running unsupported versions of Windows will cease to receive security updates following the Windows Update certificate rotation scheduled for next year. The change impacts legacy systems that can no longer verify update authenticity, potentially leaving them exposed to unpatched vulnerabilities.
- Which products are affected?
- Windows
- What should defenders do?
- Microsoft recommends upgrading to a supported version of Windows. No patch is available for unsupported versions. Organizations should audit systems and plan migration to a maintained Windows release.
Microsoft has announced that devices running unsupported versions of Windows will stop receiving security updates after the next Windows Update certificate rotation. The certificate rotation is scheduled for next year, after which Windows Update will no longer deliver security updates to systems running outdated Windows versions. The company stated that the change is intended to improve security by ensuring that only supported, actively maintained Windows versions can receive critical patches. Microsoft has not provided a patch for unsupported Windows versions and is advising affected users to upgrade to a currently supported edition of Windows. The advisory applies to Windows devices running unsupported versions globally. No specific exploitation of the certificate change has been reported, but the risk is centered on the loss of security updates for legacy systems. The exact list of unsupported Windows versions and the precise rotation date beyond "next year" were not detailed in the original announcement. Security researchers recommend that organizations audit their Windows fleet and prioritize upgrading unsupported installations to a maintained version to maintain security coverage.
Security Details
The Windows Update certificate rotation next year will prevent Windows Update from delivering security updates to devices running unsupported Windows versions. This change enforces version support requirements at the update infrastructure level.
Affected products
Windows
Mitigation
Microsoft recommends upgrading to a supported version of Windows. No patch is available for unsupported versions. Organizations should audit systems and plan migration to a maintained Windows release.
Sources
BleepingComputer
Microsoft: Outdated Windows devices will stop receiving security updates
Oct 9, 2026 · 10:12
Original link
Related Security News
Anthropic Expands Claude Access for Vetted Cyber Teams, Project Glasswing Identifies 129,000 Vulnerabilities
Anthropic announced the expansion of its Claude AI model access program for vetted cybersecurity professionals, allowing reduced safeguards and blocking classifiers. Concurrently, the company's Project Glasswing initiative reported uncovering at least 129,000 verified software vulnerabilities between April and July 2026. The initiative aims to improve AI security testing capabilities while highlighting significant software quality issues across tested systems.
