TESTIMONIALS

“Received the latest edition of Professional Security Magazine, once again a very enjoyable magazine to read, interesting content keeps me reading from front to back. Keep up the good work on such an informative magazine.”

Graham Penn
ALL TESTIMONIALS
FIND A BUSINESS

Would you like your business to be added to this list?

ADD LISTING
FEATURED COMPANY
Commercial

Windows 10 support deadline nears

by Mark Rowe

Support for Windows 10 software is set to end any day – October 14; and concerns have been raised about the wide use still of this operating system. Tech firm Microsoft says that your PC will still work; but recommends that you install Windows 11, citing the ‘modern and efficient experience’ of the new version, and ‘current demands for heightened security’.

Jan Bee, Chief Information Security Officer at TeamViewer, says: “In a few days, two in five endpoints will no longer receive patches and updates, leaving them exposed to vulnerabilities. Companies and individuals need to upgrade to a newer, supported operating system as soon as possible. Keeping your systems up to date is one of the most effective ways to protect individuals and businesses against cybersecurity threats.”

What it means

For consumers and business users of IT, it means –

  • no new features, and no routine security fixes unless a device is enrolled in ESU;
  • unpatched Windows and driver flaws become permanent entry points for attackers. Through these vulnerabilities, attackers can gain access to the device and people’s data – files, personal information, passwords – run commands and even use the device to execute further attacks; and
  • new peripherals or apps are more likely to break on holdout machines.

Cuation

The cyber firm Avast advises that If you receive a call claiming to be from Microsoft urging you to upgrade, or suspicious- looking pop-up messages, stay cautious and do not engage. If your device is eligible for an upgrade, you will receive an official notification from Microsoft.

Luis Corrons, Security Evangelist at Avast, says that end of support is not the end of the world, but it is the end of free safety nets. He says: “Attackers know that, which is why unpatched Windows and driver bugs become long-lived entry points. It is also an opportunity for scammers. People may see fake pop-ups, upgrade offers or even get phone calls pretending to be from Microsoft.”

Comments

Scott Walker, Chief Architect at the cyber firm Orange Cyberdefense, said: “Windows 10 was already a hotbed for vulnerabilities; our 2025 Security Navigator report previously found that the operating system (OS) accounted for the majority of high and critical vulnerabilities, out of all Windows OS versions. With Microsoft sunsetting support on October 14, this problem will only worsen. It’s critical for companies to update ahead of the deadline.

“However, this is a significant challenge for some. Several sectors defined by the UK as critical national infrastructure (CNI) – such as government, financial services, and energy & utilities – are still dependent on legacy IT systems. And, often, the older the hardware is, the less likely its OS can be updated, meaning these companies are faced with the significant cost of purchasing new hardware. It’s no easy feat, nor is it quick. Given this, it’s likely that some will miss the end of life deadline. It’s also plausible that, within immense networks of devices, some could be missed and could continue to run on Windows 10. As such, it’s crucial to instate mitigations to navigate this period of change.”

Charaka Goonatilake, CTO at Panaseer says that sticking with Windows 10 beyond October is like leaving your front door wide open in a bad neighbourhood. “There will be no more updates, patches, bug fixes or technical support; you are on your own. Any newly uncovered vulnerabilities will now be left open, zero days will be undefendable – it’s open season for attackers. Once attackers get a foothold, they’ll move laterally across your network, exploiting other control failures to weave through every gap they find. That makes organizations easy targets for ransomware and malware, putting sensitive data at risk.
“The biggest risks aren’t always the ones you know about, it’s the unknown unknowns that can really hurt you. Organisations need a comprehensive understanding of how and where Windows 10 is currently in use, by who and for what purpose. Once this is mapped out, the next step is prioritization. By combining multiple data sources, security teams can create a risk profile for each system – who uses it, what it connects to, what security controls are in place, and how critical it is to the business. This lets teams focus on upgrading the highest risk systems first, while also identifying where compensatory controls need to be applied.
“Taking this pragmatic, data-driven risk-based approach helps security leaders to make the business case for investments. Organizations can then make informed decisions on what must be upgraded now, what can be protected in the short term, and what level of risk the business is actually willing to accept.”
Migration
Earlier in the year, Steve Young, Senior Vice President and UK Managing Director for Dell Technologies described the migration to Windows 11 as a key moment for UK businesses to align their technology with their strategic ambitions.