Microsoft warns that certificates used for Windows Update will expire in spring and summer 2027, leaving older Windows versions without security updates unless upgraded.
Microsoft says older Windows versions will stop getting security updates after a certificate rotation in 2027. If you’re on Windows 11 25H2 or newer, you’re fine. If not, you’ll need to upgrade to a supported version before May 17 or June 19, 2027.
What you should do: take an inventory of devices, plan upgrades to a supported Windows release, and ensure monthly security updates on supported devices. For businesses, prepare upgrade plans to avoid gaps in protection.
Microsoft is giving a clear cutoff for devices running older Windows versions: after a planned rotation of Windows Update certificates, those devices will stop getting security updates next year. If you want to stay protected, you need to move to a supported Windows release before the certificates expire in May and June 2027.
The two deadline dates are May 17, 2027 and June 19, 2027. When those dates arrive, devices still on unsupported Windows versions will no longer access Windows Update services or receive security fixes. In other words, exposure to known vulnerabilities could rise on those machines unless they’re upgraded in time.
Microsoft lays out upgrade paths depending on what you’re running. If you’re on Windows 11 with version 25H2 or newer, you don’t need to take action. Those on Windows 11 24H2 or Windows Server 2025 should install a security update from July 2026 or later before June 19, 2027. Other supported lines, such as various Windows 11, Windows 10, and Windows Server 2022 editions, should get a July 2026 security update or newer by the deadline. For older, longer‑unsupported Windows versions, Microsoft recommends upgrading to a currently supported Windows client or server release by the May or June 2027 dates.
Beyond the specifics, the gist is simple: check what Windows your devices are running and plan upgrades before the cutoffs. Microsoft is also rolling out the Windows 11 2026 Update (26H2) as a small enablement package to eligible systems, with a phased rollout to follow.
What this means for everyday users is straightforward: if your PC is on an outdated Windows version, you’ll need to verify you’re on a supported release and schedule an upgrade before the deadlines. For households and small businesses, start a quick inventory of devices and map out which ones can move to a newer Windows build in time.
Action depends on your current Windows line. If you’re on Windows 11 25H2 or newer, you’re in the clear. If you’re using Windows 11 24H2 or Windows Server 2025, you’ll want a July 2026 security update or newer before the June 19, 2027 deadline. For other supported Windows 11, Windows 10, and Windows Server 2022 variants, aim for a July 2026 security patch or newer by that date. Those on older or non‑supported versions should plan an upgrade to a current Windows release by the specified deadlines.
For most people, the takeaway is practical: stay on a supported Windows version and keep it updated. If your device is on an unsupported edition, you’ll need to upgrade, which could mean a feature update or a clean install, depending on your setup. For businesses, it’s a reminder to audit devices, confirm upgrade paths, and avoid leaving machines on unpatched software when the clocks run out.
Those dates mark when the Windows Update certificates expire. After them, devices on older Windows versions lose access to Windows Update and stop getting security fixes.
No action is required for Windows 11, version 25H2 and later. For other versions, follow the version‑specific upgrade guidance before the deadlines.
You're reading the quick version.
Anthropic launches OSS Scanner, a no-cost vulnerability check that uses its top AI models to assess open‑source projects, with reports that aren’t human‑reviewed.
The dating app is testing a feature to block screenshots of personal profile information in India, as part of broader privacy controls.
A critical memory-overflow vulnerability in Citrix NetScaler ADC and Gateway requires swift updates to prevent remote code execution or crashes.
The Daily Brief
Every morning, the news that matters from AI, phones, apps and the people shaping tech. Explained in plain English. Free.
One email a day. No spam, unsubscribe anytime. Privacy policy
