Microsoft Extends Security Updates for Legacy Exchange and Skype Products
Severity: Low (Score: 27.9)
Sources: techcommunity.microsoft.com, Theregister
Summary
Microsoft has announced a second period of Extended Security Updates (ESU) for older versions of Exchange Server and Skype for Business Server, acknowledging that some customers have not migrated to newer products. This extension will run from May 2026 to October 2026, with the stipulation that customers must pay for the service and there is no guarantee of updates during this period. Microsoft had previously stated that the ESU period would not be extended past April 2026, but has now reversed this decision due to customer feedback. The company has emphasized that this will be the final extension and urged customers to complete their migrations. The announcement reflects Microsoft's frustration with the slow migration process among its customer base. The ESU applies to Exchange Server and Skype for Business versions 2015 and 2019. Microsoft reiterated that it would prefer not to sell the ESU and encouraged customers to finalize their migrations instead. Key Points: • Microsoft extends ESU for Exchange Server and Skype for Business until October 2026. • Customers must pay for the ESU service with no guarantee of updates. • This is the final extension, and Microsoft urges customers to migrate to newer products.