14 October 2024
“Technology continues to grow at an ever-evolving pace.” It is a phrase we hear and read all too often nowadays. But that doesn’t mean that it is not true. As newer technologies, software's and operating systems become available, older technologies likewise begin to die out and technology providers “drop support” or make products “end of life.” The danger being, that if users continue to use hardware, software, and operating systems once they have become end-of-life, they can begin to experience unexpected issues that will not be resolved, or that vulnerabilities discovered by cyber criminals could be exploited as security patches are no longer released.
Microsoft have announced that Windows 10, which launched back in July of 2015, will reach its “End of Life” (EOL) on October 14th, 2025. When you consider that Windows 11 launched in October of 2021 as a Free Upgrade for Windows 10 devices, you would not think that Windows 10 becoming “End of Life” would be a big issue.
However, as of October 2024, Windows 10 still remains the dominant operating system worldwide, with 62.75% of Windows computers globally still using the 9-year-old operating system (roughly 240 million devices), compared to only 33.42% running Windows 11. Thankfully, in the UK numbers are slightly better than the rest of the world, with 44.02% of Windows devices using Windows 11, but Windows 10 still dominates the market with 54.69% of users still using the operating system. The widespread use of Windows 10 underscores the importance of understanding the cyber security implications for businesses that continue to rely on Windows 10 today, and why they should consider updating (or upgrading) before October 14th, 2025.
Additionally, if you are one of the 3.7% of people worldwide who are still using Windows 7, 8 or 8.1... we need to talk.
The Cyber Security Risks of Continuing with Windows 10
Once Microsoft ends support for Windows 10 on October 14th, 2025, the operating system will no longer receive free regular security updates, patches, or technical support from Microsoft. This could potentially leave millions of devices around the world vulnerable to the increasing array of cyber threats, including malware, ransomware, data breaches, targeted attacks, and more.
Cyber criminals often target these widely used “end of life” operating systems because they know that vulnerabilities will no longer be patched, making Windows 10 systems an easy target. For businesses, the cyber security implications of this could mean severe financial and reputational damage, especially if sensitive data is compromised because of knowingly using an operating system that is potentially vulnerable to newer threats.
Compliance is another critical issue. Many industries, especially those in healthcare, finance, law, and retail, are subject to strict regulatory requirements regarding data protection and security, especially businesses that want to abide by Cyber Essentials, Cyber Essentials Plus, or ISO27001 frameworks.
Continuing to use an unsupported operating system could result in non-compliance with these regulations, leading to hefty fines and legal repercussions. Additionally, businesses may face difficulties renewing or obtaining cyber insurance, as insurers increasingly require that businesses use up-to-date operating systems as part of their coverage criteria.
Why Many Haven't Upgraded
Despite the risks, a considerable number of users and businesses have not upgraded to Windows 11. One of the primary reasons for this is hardware compatibility. Windows 11 has stricter hardware requirements, including many older CPUs not being supported and the requirement of TPM 2.0 or later for enhanced security. Unfortunately, many older devices running Windows 10 do not meet these specifications and therefore cannot be updated. For businesses, upgrading hardware across an entire organisation can be a costly and logistically challenging process, especially given that typical hardware refresh cycles for many businesses range from three to five years. Necessitating for the migration of user data, setting up software's, security and more.
What if Your Business Does Not Upgrade?
Despite Microsoft officially declaring Windows 10 end of life, there will be a period of saving grace for those businesses who may not be able to upgrade straight away. Microsoft will be offering their Extended Security Updates (ESU) program as an annual subscription for 3 years following the “end of life date”, with subscribers to the ESU program receiving monthly critical and/or important security updates. Similarly, many cyber security tools, such as the ones that we provide to our customers, will continue to work on Windows 10 operating systems, and customers will be notified in advance of that support also becoming “end of life”. Despite the ESU program, it is still essential that businesses plan to transition their devices away from Windows 10 and ensure ongoing security and support for their business for years to come.
Business Hardware Strategies Moving Forward
To mitigate the risks associated with the continued use of Windows 10, we recommend that businesses adopt a standard hardware lifecycle strategy, ensuring that devices within their business are kept up to date with changes in hardware requirements as operating systems and software solutions become more demanding of newer technologies. This includes assessing current hardware and software to determine compatibility with Windows 11, annual budgeting for necessary upgrades, and considering alternative solutions such as cloud-based services or virtual desktops.
While Microsoft does offer Extended Security Updates (ESUs) for businesses that need more time to transition, it is important to understand that this is a temporary and potentially costly solution. The most secure and future-proof option remains upgrading to Windows 11 or investing in new hardware that can support the latest operating systems.
What's the Next Step?
While the end of Windows 10 support poses significant challenges for the 54.69% of the UK who are still using the 9-year-old Operating System, it also presents an opportunity for businesses to modernise their IT infrastructure, improve security, and ensure compliance with industry frameworks and regulations.
Proactive planning, Device Lifecycle Management and prompt action are crucial to avoiding the risks associated with the continued use of unsupported operating systems.
If you would like to find out how we can support your business with device lifecycle management, as well as support you to transition away from Windows 10 before October 14th, 2025, fill out the form below to speak with us.
    Help Desk