Microsoft has extended free Windows 10 Extended Security Updates for personal devices by one year to October 12, 2027. The move gives users more time to transition amid hardware shortages and draws mixed reactions from consumer groups who say it comes too late.
The extension reflects an ongoing commitment to help customers remain protected while they find a PC that suits their needs.
HOP maintains that Microsoft should provide free security updates until 2030.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Microsoft says CVE-2026-124194, a moderate Outlook spoofing flaw, is already exploited and can disclose an NTLMv2 hash if a user opens a crafted file.
Microsoft's November 2026 Security Updates list 1,094 flaws, including 63 rated critical and one Outlook bug already exploited.
Microsoft has announced CVE-2026-118147, a high-severity spoofing vulnerability caused by improper certificate validation in Visual Studio. The flaw affects four product lines and requires immediate updates to the listed fixed builds.
Microsoft reported fiscal first-quarter revenue of $92.3 billion, up 19 percent, with Azure growth of 48 percent. Microsoft Cloud revenue was $63.9 billion, up 30 percent, and Devices and Consumer revenue fell 3 percent to $15.5 billion.
Microsoft published CVE-2026-62765 on Oct. 27, describing a type-confusion flaw in Microsoft Edge (Chromium-based) that could allow remote code execution, rated Important with a CVSS 3.1 score of 7.5. Microsoft's advisory lists it as not exploited and not publicly disclosed. The advisory's fixed-build number conflicts with Edge's own release notes, so the exact patched version is unconfirmed.
