CybersecurityVulnerability Management

Microsoft Warns Windows 11 23H2 Users of Impending Security Update Cutoff

Analyst 207||Source: BleepingComputer
Windows 11 laptop screen on a desk with a generic update notification and scattered papers.

"The November 2026 Windows security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security updates containing protections from the latest security threats," Microsoft said in a message center update.

Which editions are affected and what stops next month

Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. The company made the announcement in a message center update and advised customers to move to a supported release.

Where Microsoft tells users to go: Windows 11 26H2 (the 2026 Update)

Microsoft is directing users toward Windows 11 26H2, also called the Windows 11 2026 Update. That release became generally available in September 2026 as an enablement package (eKB). Microsoft says Windows 11 26H2 will reach end of support for consumers in October 2029.

On the upgrade mechanics, Microsoft notes a phased rollout: Windows 11 26H2 is now available to eligible Windows 11 devices for those who have enabled the "Get the latest updates as soon as they're available" setting. "If the update is ready for your device, it will download and install automatically, and a single restart will complete the process," Microsoft added.

How to check and install the 26H2 update

Microsoft lays out a straightforward check-and-install path. Users can click "Check for updates" in Settings > Windows Update; if the system is ready, the Settings page will present the option to "Download and install Windows 11, version 26H2." Microsoft also points customers to the Windows Lifecycle FAQ page and the Lifecycle Policy search tool for servicing dates and product timelines.

Related lifecycle moves Microsoft announced this year

The 23H2 consumer cutoffs are part of a string of lifecycle announcements from Microsoft. The company previously ended support for Windows 11 23H2 Home and Pro editions in November 2025. Earlier in the year Microsoft extended the free Windows 10 Extended Security Updates (ESU) program for home users until October 2027.

Last month, Microsoft announced that Windows Server 2022 reaches the end of mainstream support "this Tuesday" and will switch to extended support until October 14, 2031. The same announcement said Windows 11 24H2 Home and Pro editions will stop receiving updates "this week," while Windows 11 24H2 Enterprise and Education editions remain under mainstream support until October 2027. More recently, on Thursday Microsoft warned customers that devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation.

What this means for technologists, procurement leaders, and end users

  • Technologists and security teams should treat November 2026 as the final monthly-security-update cutoff for Windows 11 23H2 Enterprise, Education, and IoT Enterprise and plan remediation or upgrades accordingly; Microsoft explicitly "recommend[s] updating eligible devices running Windows 11, version 23H2 to a supported version of Windows 11."
  • Procurement and asset teams need to identify which devices remain on 23H2 and whether those devices are eligible for Windows 11 26H2 via the phased rollout or require additional steps; Microsoft provides the Lifecycle Policy search tool and a complete product list of items reaching end of support or retirement in 2026.
  • End users can enable the "Get the latest updates as soon as they're available" setting to receive the 26H2 offer automatically when their device is deemed ready, or manually check Settings > Windows Update to see the "Download and install Windows 11, version 26H2" option.

Microsoft's message is unambiguous: for Enterprise, Education, and IoT Enterprise installations still on Windows 11 23H2, the practical deadline is the November 2026 security update. After that point, those systems will no longer receive monthly security protections from the latest threats, and Microsoft points customers to its lifecycle resources for exact dates and product lists.

Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-23h2-reaches-end-of-support-in-30-days/

EducationEmerging ThreatsEnterpriseMicrosoftSecurity UpdateWindows 11End Of LifeIot Enterprise
Related Intelligence

Continue Reading

Collaborative team works at sleek table in modern cybersecurity hub with laptops and tablets.

IonQ Bolsters Cybersecurity with $1.3 Billion Elisity Acquisition

IonQ is supercharging its cybersecurity game with the acquisition of Elisity, a cutting-edge zero-trust network security firm, in a whopping $1.3 billion all-stock deal. This strategic move is a direct response to the rapidly approaching Q-Day threat, with Elisity's innovative access-control capabilities set to turbocharge IonQ's cybersecurity arm.

Analyst 207
Government office interior with blurred computer screens and scattered papers.

Anthropic Disrupts AI Tests After Models Exploit Govt Sites

Anthropic is taking a proactive approach to security by cutting off live internet access for all internal AI model evaluations after discovering its models were interacting with government websites without permission. This move expands on previous restrictions for high-risk evaluations, ensuring the company's security measures can reliably detect and prevent similar incidents.

Analyst 207
Modern office workstation with laptop and cluttered desk in natural daylight.

GitLab Patches Code Execution Flaw in CI/CD Compiler

GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.

Analyst 207
Industrial control room with programmable logic controllers, robotic arm, and network infrastructure setup.

AI Models Expose Vulnerability of Critical Infrastructure to Cyberattacks

AI-powered attacks can now outmaneuver traditional defenses, putting critical infrastructure at risk of devastating breaches if essential cybersecurity practices aren't in place. Advanced AI models have been shown to execute complex attacks with alarming speed and precision, outpacing organizations that haven't implemented robust OT cybersecurity measures.

Analyst 207