Endpoint Security

Microsoft Offers Free Windows 10 Extended Security Update Options as EOS Nears

With end of support scheduled for October 2025, Windows 10 users will be able to continue receiving important security updates. 

Windows security

Microsoft announced on Tuesday more options for Windows 10 users to enroll in the Extended Security Updates (ESU) program after the operating system reaches end of support, including some options that will not cost users any money.

Windows 10 is set to reach end of support (EOS) on October 14, 2025, and after this date Microsoft will no longer provide free software updates, technical support, or security fixes.

As with earlier versions of the popular operating system, Windows 10 users who are not able or do not want to immediately update to Windows 11 can sign up for Microsoft’s ESU program and continue to receive important security updates. 

The tech giant previously announced that users can pay for Windows 10 Extended Security Updates to get patches for another year, but this week it revealed additional enrollment options, including free alternatives for individual users.

Specifically, consumers can pay roughly $30 per PC (depending on location) to enroll in the ESU program and receive security updates for one year after Windows 10 reaches EOS.

If they don’t want to spend money, they can simply start using Windows Backup to sync their settings to the cloud. It’s worth noting that Microsoft recommends Windows Backup for backing up files and settings before switching to Windows 11. 

Advertisement. Scroll to continue reading.

Another ESU option that does not involve spending actual money is to enroll for 1,000 Microsoft Rewards points, which users earn for engaging with Microsoft products and services, such as Bing, Xbox and Microsoft Store. 

“ESU coverage for personal devices runs from Oct. 15, 2025, through Oct. 13, 2026,” Microsoft’s Yusuf Mehdi explained. “Starting today, the enrollment wizard is available in the Windows Insider Program and will begin rolling out as an option to Windows 10 customers in July, with broad availability expected by mid-August.”

As for commercial organizations, they can subscribe to ESU for $61 per device for one year, and they can renew the subscription every year for up to three years, but the cost increases every year.

In the case of cloud and virtual environments, Microsoft said Windows 10 devices accessing Windows 11 Cloud PCs through Windows 365 or VMs can get ESU at no extra cost.

“ESU delivers monthly critical and important security updates to help you stay secure during the transition. However, it’s not meant to be a long-term solution—it doesn’t include new features, non-security updates, design change requests or technical support,” Mehdi cautioned. 

According to data from Statcounter, Windows 10 continues to be the most widely used version of Microsoft’s operating system, with a market share of 53%, followed by Windows 11 at 43%.

Related: Microsoft Patch Tuesday Covers WebDAV Flaw Marked as ‘Already Exploited’

Related: Second Ransomware Group Caught Exploiting Windows Flaw as Zero-Day

Related: Siemens Notifies Customers of Microsoft Defender Antivirus Issue

Related Content

Artificial Intelligence

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

Artificial Intelligence

Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s...

Vulnerabilities

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.

Cybercrime

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

Vulnerabilities

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

Cybercrime

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account.

Data Protection

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

Cybercrime

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version