Microsoft: Outdated Windows devices will stop receiving security updates
Unsupported Windows versions will lose access to Windows Update services after certificate rotation.
Microsoft announced that devices running unsupported versions of Windows will no longer receive security updates starting in May and June 2027, following the rotation of Windows Update certificates. Users and administrators must upgrade to a supported Windows version before these certificates expire to continue receiving critical security patches. While systems on supported versions have already received new certificates, those on older versions need to install specific security updates or plan for an upgrade.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Windows 11?
Get an email when a new story names Windows 11, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMicrosoft has set a hard deadline for devices running outdated Windows versions: once Windows Update certificates rotate in mid-2027, unsupported systems will be permanently cut off from security patches. This matters because unpatched operating systems become prime targets for ransomware, malware, and exploits leveraging known vulnerabilities that vendors no longer address. Organizations still running legacy Windows versions face compounding risk as the threat landscape evolves and their systems remain frozen in time. The certificate expiration mechanism means the cutoff is non-negotiable — there is no workaround or grace period once the deadline passes.
What helps against this
How we list vendors
- Automated patch management
Known holes get closed in days, not months.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.