[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flCtyRP6zKXNjuMbHlTpqPCd4eSUPQhVKdBzgm8FXmhE":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":121},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"b8dafe6a-eb4f-47db-bb44-1ff881499432","Microsoft: Outdated Windows devices will stop receiving security updates","microsoft-outdated-windows-devices-will-stop-receiving-security-updates-e48d18","Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...]","Microsoft announced that devices running unsupported versions of Windows will no longer receive security updates starting in May and June 2027, following the rotation of Windows Update certificates. Users and administrators must upgrade to a supported Windows version before these certificates expire to continue receiving critical security patches. While systems on supported versions have already received new certificates, those on older versions need to install specific security updates or plan for an upgrade.","Unsupported Windows versions will lose access to Windows Update services after certificate rotation.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-outdated-windows-devices-will-lose-security-protection-next-year\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F08\u002F22\u002FWindows.jpg","2026-10-09T10:12:24+00:00","2026-10-09T12:00:08.894958+00:00",7,[17,20,22,24,26,28],{"name":18,"type":19},"Windows 11","product",{"name":21,"type":19},"Windows Server 2025",{"name":23,"type":19},"Windows Server 2022",{"name":25,"type":19},"Windows 10",{"name":27,"type":19},"Windows Server 2019",{"name":29,"type":19},"Windows Server 2016","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[18,21,23],{"controls":46,"vendors":117},[47,75,103],{"slug":48,"name":49,"problem":50,"products":51},"patch-management","Automated patch management","Known holes get closed in days, not months.",[52,60,67],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":48,"product_name":64,"url":65,"description":66},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":76,"name":77,"problem":78,"products":79},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":98,"url":101,"description":102},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":104,"name":105,"problem":106,"products":107},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[108,109],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[118],{"slug":110,"name":111,"logo_path":112,"roles":119},[120],"affected",{"slug":122,"title":123,"body":124,"framework_refs":125,"framework_notes":133},"unsupported-windows-devices-lose-security-updates-in-2027","Unsupported Windows Devices Lose Security Updates in 2027","Microsoft has set a hard deadline for devices running outdated Windows versions: once Windows Update certificates rotate in mid-2027, unsupported systems will be permanently cut off from security patches. This matters because unpatched operating systems become prime targets for ransomware, malware, and exploits leveraging known vulnerabilities that vendors no longer address. Organizations still running legacy Windows versions face compounding risk as the threat landscape evolves and their systems remain frozen in time. The certificate expiration mechanism means the cutoff is non-negotiable — there is no workaround or grace period once the deadline passes.",[126,127,128,129,130,131,132],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-8: Information System Component Inventory","NIST CSF ID.AM-2: Software platforms and applications are inventoried","ITIL Change Management: Planned and emergency change procedures","GDPR Article 32: Security of processing (technical measures to ensure ongoing integrity)",{}]