CybersecurityVulnerability Management

Microsoft Sets End Date for Windows 11 24H2 Support

Analyst 207||Source: BleepingComputer
Empty office with laptop on desk near window, screen blurred.

"On October 13, 2026, Windows 11, version 24H2 Home and Pro editions, and Windows 10 Enterprise LTSB 2016 will reach end of updates," Microsoft said in a message center update.

What Microsoft announced and who is affected

Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates after October 13, 2026. The company said that "after this date, devices running these editions will no longer receive monthly security and non-security preview updates containing protections from the latest security threats."

Enterprise and Education editions remain on a different timetable

Under Microsoft's lifecycle policy, Windows 11 24H2 Enterprise and Education editions remain under mainstream support until October 2027. That distinction means organizations using those licensed editions will continue to receive mainstream servicing beyond the October 2026 cutoff that applies to the Home and Pro builds.

Microsoft's recommended path: move to Windows 11 25H2

Microsoft advised customers to upgrade to Windows 11 25H2, also called the Windows 11 2025 Update. The company noted that version 25H2 became generally available in September 2024 and was released as a minor update installed through an enablement package. Microsoft also warned that systems running Windows 11 24H2 Home and Pro that aren't managed by IT departments will automatically upgrade to Windows 11 25H2, while still allowing customers to choose when to restart or postpone the update.

For individual devices, Microsoft provided a simple check: "If you have an eligible Windows 10 or Windows 11 device, you can check whether the update is available by selecting Settings > Windows Update and selecting Check for updates," and added that "If your device is ready for the update, you'll see the option to Download and install Windows 11, version 25H2."

Other Microsoft lifecycle moves clustered around October 13

Microsoft's October servicing date covers several products beyond Windows 11 24H2 Home and Pro. Last week the company announced that Windows Server 2022 will switch from mainstream to extended support on October 13 and remain in extended support until October 14, 2031. Earlier this year Microsoft quietly extended the free Windows 10 Extended Security Updates (ESU) program for home users until October 2027, and it also stopped rolling out security updates to devices running Windows 11 Home and Pro 23H2 in November 2025.

Microsoft pointed users to its Windows Lifecycle FAQ page and the Lifecycle Policy search tool for more information, and to a support-site list that details products and services that will be retired or reach end of support this year.

How IT teams, enterprises, and home users should respond

  • IT teams and managed-environment administrators: The 24H2 Enterprise and Education editions remain supported until October 2027, giving IT managers additional runway to plan upgrades for corporate fleets. For unmanaged Home and Pro devices, Microsoft warned that upgrades to 25H2 will occur automatically, so administrators should inventory devices and review update configurations to ensure end-user disruption is minimized.
  • Enterprises and procurement leaders: Organizations running mixed editions should track which devices are licensed as Enterprise or Education versus Home and Pro, because the latter set will stop receiving updates in October 2026. The lifecycle search tools Microsoft pointed to can help confirm product-specific retirement dates and coordinate procurement or licensing decisions tied to extended servicing.
  • Home users and general public: Devices on Windows 11 24H2 Home and Pro should be prepared to upgrade to 25H2. Users can manually check for the update via Settings > Windows Update and, if eligible, choose "Download and install Windows 11, version 25H2." Those who prefer to delay will retain control over restart timing or postponement, but devices not managed by IT may eventually update automatically.

Microsoft's message is procedural and calendar-driven: a clear cutoff for two popular consumer editions, continued mainstream servicing for Enterprise and Education, and a pointed nudge to move to version 25H2. For users and organizations that must stay on supported builds, the immediate task is inventory and scheduling—use the Windows Update check and Microsoft's lifecycle pages to confirm device eligibility and timelines.

Original reporting: BleepingComputer — Windows 11 24H2 Home and Pro reach end of support in October

Emerging ThreatsMicrosoftOperating SystemsPatch ManagementWindows 11End Of Life
Related Intelligence

Continue Reading

Network operations room with rows of computer servers and DNS setup.

BIND 9 Update Fixes 14 Flaws, Including Unauthenticated Crashes

The Internet Systems Consortium has rolled out a crucial BIND 9 update that patches 14 security flaws, including unauthenticated crashes, to keep your DNS server safe and secure. Fortunately, no active exploits have been reported so far, but it's still essential to update to the latest releases: BIND 9.20.29, BIND 9.21.26, or BIND 9.20.29-S1 to fix the vulnerabilities.

Analyst 207
Security professional walks through modern office corridor with server racks and testing devices.

Pentesting Evolves as AI Agents Close Vulnerability Gap

The vulnerability gap is widening as attackers speed up exploitation, with new vulnerabilities being weaponized in just five days, while defenders take a median of 43 days to patch - and 80% coverage is no longer enough to keep you safe.

Analyst 207
Rack-mounted networking equipment, including a router or DNS server, in a network operations center.

Unbound DNSSEC Validator Flaw Enables Remote Code Execution

A critical flaw in the Unbound DNSSEC Validator, known as CVE-2026-81642, allows attackers to trigger a heap overflow, potentially enabling remote code execution on vulnerable systems. This vulnerability affects all Unbound DNS resolver releases before 1.26.1, putting countless systems at risk.

Analyst 207
Empty office network closet with server racks, fake files, and folders on a shelf.

CISA Promotes Decoys to Detect Breaches

Want to catch cyber attackers in the act? Planting decoy files, accounts, and credentials inside your network can expose machine-driven threats and help you detect breaches before they cause harm.

Analyst 207