Lancs.Live

Windows 10 Reaches End of Support; Microsoft Offers Extended Security Updates

First seen 23 Nov 2025, 03:35 UTC • •38.9

Article Content

1 / 16

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

On October 14, 2025, Microsoft officially ended support for Windows 10, leaving users without security updates unless they enroll in the Extended Security Updates (ESU) program. Following this, Microsoft addressed issues with false end-of-support warnings and provided patches to assist users in maintaining security coverage. Users are encouraged to act quickly to secure their systems against vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 184d ago How this analysis works

More articles in this cluster (15)

Threat Graph

16 entities, 45 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (6)

Malware
Ransomware
Zero-day Exploit
T1059.001 - PowerShell
T1059 - Command and Scripting Interpreter
T1112 - Modify Registry

Vulnerability (4)

CVE-2020-1170
CVE-2025-24990
CLFS Flaw
Windows Defender Elevation Of Privilege Vulnerability

Affected Platform (5)

Windows
Windows 10
Windows 11
Windows 365
Windows Defender

Tool (1)

PowerShell

Relationships

PowerShell exploits CVE-2020-1170
PowerShell exploits CVE-2025-24990
PowerShell exploits CLFS Flaw
PowerShell exploits Windows Defender Elevation Of Privilege Vulnerability
CVE-2020-1170 targets Windows
CVE-2020-1170 targets Windows 10
CVE-2020-1170 targets Windows 11
CVE-2020-1170 targets Windows 365
CVE-2025-24990 targets Windows
CVE-2025-24990 targets Windows 10
CVE-2025-24990 targets Windows 11
CVE-2025-24990 targets Windows 365
CLFS Flaw targets Windows
CLFS Flaw targets Windows 10
CLFS Flaw targets Windows 11
CLFS Flaw targets Windows 365
Windows Defender Elevation Of Privilege Vulnerability targets Windows
Windows Defender Elevation Of Privilege Vulnerability targets Windows 10
Windows Defender Elevation Of Privilege Vulnerability targets Windows 11
Windows Defender Elevation Of Privilege Vulnerability targets Windows 365
Malware targets Windows
Malware targets Windows 10
Malware targets Windows 11
Malware targets Windows 365
Ransomware targets Windows
Ransomware targets Windows 10
Ransomware targets Windows 11
Ransomware targets Windows 365
Zero-day Exploit targets Windows
Zero-day Exploit targets Windows 10
Zero-day Exploit targets Windows 11
Zero-day Exploit targets Windows 365
T1059.001 - PowerShell targets Windows
T1059.001 - PowerShell targets Windows 10
T1059.001 - PowerShell targets Windows 11
T1059.001 - PowerShell targets Windows 365
T1059 - Command and Scripting Interpreter targets Windows
T1059 - Command and Scripting Interpreter targets Windows 10
T1059 - Command and Scripting Interpreter targets Windows 11
T1059 - Command and Scripting Interpreter targets Windows 365
T1112 - Modify Registry targets Windows
T1112 - Modify Registry targets Windows 10
T1112 - Modify Registry targets Windows 11
T1112 - Modify Registry targets Windows 365
CVE-2020-1170 related to Windows Defender

Following this threat?

Track CVE-2020-1170 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…