CybersecurityVulnerability Management

Microsoft Flags End of Support for Windows 11 24H2 Editions

Analyst 207||Source: BleepingComputer
Windows 11 laptop screen on a clean desk with a softly lit office background.

"On October 13, 2026, Windows 11, version 24H2 Home and Pro editions, and Windows 10 Enterprise LTSB 2016 will reach end of updates," Microsoft warned yesterday in a message center update.

Microsoft's October 13, 2026 end-of-updates deadline

Microsoft notified customers that systems running Windows 11 24H2 Home and Pro editions, and Windows 10 Enterprise LTSB 2016, will stop receiving monthly security and non-security preview updates on October 13, 2026. The company said devices running those editions "will no longer receive monthly security and non-security preview updates containing protections from the latest security threats" after that date.

Which editions remain supported through 2027

Not all Windows 11 24H2 installations are being cut off on the same schedule. Microsoft clarified that Enterprise and Education editions of Windows 11 24H2 will remain under mainstream support until October 12, 2027. In parallel, Microsoft said it quietly extended the free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled Windows 10 devices to continue receiving security updates until October 12, 2027.

The upgrade path: Windows 11, version 25H2 (2025 Update)

Microsoft directed customers toward Windows 11 25H2 — also called the Windows 11 2025 Update — as the upgrade path. According to the company, version 25H2 became generally available in September 2024 as a minor update delivered to version 24H2 through an enablement package. For devices running 24H2 Home and Pro that are not managed by IT departments, Microsoft said the 25H2 update will be delivered automatically; those users "will still be able to postpone the update or choose when to restart."

Microsoft also provided a simple check path for eligible devices: select Settings > Windows Update and choose Check for updates. If a device is ready for the upgrade, Windows Update will show the option to "Download and install Windows 11, version 25H2."

Where administrators and users can find more lifecycle details

Microsoft pointed customers to its Windows Lifecycle FAQ page and the Lifecycle Policy search tool for more detailed servicing dates. The company additionally publishes lists of products it will retire or that will reach end of support in 2025, and those resources were referenced in the message center update as places to verify timelines and product status.

What this means for technologists, procurement leaders, and end users

  • Technologists and security teams: The October 13, 2026 cut-off for Home and Pro editions of 24H2 will require IT and security teams to verify which endpoints are unmanaged and whether those endpoints will accept the 25H2 enablement package automatically. Teams working with Enterprise and Education editions will still have support through October 12, 2027, and should coordinate lifecycle planning accordingly.
  • Procurement and operations leaders: Devices still on Windows 11 24H2 Home or Pro, and any remaining Windows 10 Enterprise LTSB 2016 systems, must be inventoried and scheduled for upgrade or reassessment before October 13, 2026. Microsoft also lists products slated for retirement in 2025, a resource procurement teams can use for contract and refresh planning.
  • End users and general consumers: If a device is eligible, users can check Settings > Windows Update to see the option to download and install Windows 11, version 25H2. Microsoft warned that unmanaged Home and Pro devices will receive the update automatically but that users can postpone and control restart timing.

Microsoft's announcement closes a clear window for Home and Pro users on 24H2: three months from the message center notice until the October 13, 2026 cutoff. The company has pointed to explicit upgrade mechanics and lifecycle tools; one concrete question the facts leave open is how many devices will remain on 24H2 Home or Pro and choose to defer installation past that deadline.

Read the original Microsoft notice as reported by BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/windows-11-24h2-home-and-pro-reach-end-of-support-in-90-days/

Emerging ThreatsMicrosoftOperating SystemsPatch ManagementWindows 11End Of Support
Related Intelligence

Continue Reading

Woolwich Crown Court exterior with formal entrance and courtroom window.

UK Judge Jails Pair for TfL Cyber-Attack Fueled by Selfish Bravado

Two young men have been sentenced to five years and six months in prison for a devastating cyber-attack on Transport for London, driven by their selfish desire for bragging rights. The breach cost TfL tens of millions in damages and disruption, and marks a significant milestone in the UK's crackdown on cybercrime.

Analyst 207
Dimly lit IT room with outdated computer systems and Windows devices on server racks.

Windows 10 Migration Stall Leaves Enterprises Exposed to Growing Security Risks

A surprising 16.9 percent of Windows devices still run Windows 10, leaving many enterprises vulnerable to growing security risks as they stall on migration. With the easy migrations already done, only the toughest cases remain, making it crucial to reassess and accelerate Windows 10 migration plans.

Analyst 207
Smart home device sits in living room with city view through window.

Unpatched Shark Vacuum Flaw Exposes Regional Control Risk

A security flaw in Shark vacuums could put regional control at risk, as demonstrated by researcher tokay0, who exploited the vulnerability to run root commands on hundreds of thousands of devices in a single AWS region. This alarming weakness was discovered through a clever hack that allowed tokay0 to harvest serial numbers and execute commands remotely.

Analyst 207
Security researcher surrounded by notes, code, and coffee cups at cluttered desk with laptop.

Human Judgment Still Trumps AI in Offensive Security Validation

AI-generated vulnerability reports may look polished, but they often lack substance, creating a triage burden rather than providing useful security insights. Human judgment still reigns supreme in offensive security validation, where meaningful validation and expertise are essential.

Analyst 207