End-of-Life on CuraSec

Windows 11 24H2 Home/Pro ends support in 2 months

Wed, 19 Aug 2026 11:36:35 +0000

Engineer — Plan: Audit endpoints for Windows 11 Home/Pro 24H2 and schedule upgrades to a supported build before the deadline; unpatched systems will stop receiving security updates, creating compounding exposure.
SOC/IR — Skip
Leader — Plan: Confirm whether any managed devices (dev machines, contractor endpoints) run Home/Pro 24H2 and ensure IT has an upgrade plan in place; unsupported devices become a compliance and vendor-attestation liability.

Tue, 18 Aug 2026 11:37:25 +0000

Engineer — Plan: Mainstream support ending means no new feature or non-security fixes, though extended support (security patches) continues. Start migration planning to Windows Server 2025 this quarter to avoid a rushed lift when extended support eventually terminates.
SOC/IR — Skip
Leader — Plan: Add Windows Server 2022 migration to the infrastructure roadmap and next budget cycle; security patches continue under extended support, so there is no immediate risk, but delaying planning creates future upgrade-cost pressure.

Wed, 12 Aug 2026 11:57:00 +0000

Engineer — Plan: Windows 10 ESU patch KB5120249 is available for 22H2/21H2; if you still run Win10 endpoints, apply this update and accelerate migration to Windows 11 before ESU costs escalate.
SOC/IR — Skip
Leader — Plan: If your organization is on Windows 10 ESU, factor this recurring patch cost into budget planning and set a Windows 11 migration deadline to avoid ongoing ESU licensing exposure.

Wed, 22 Jul 2026 12:46:13 +0000

Engineer — Plan: If you still run Exchange 2016 or 2019 on-premises, schedule migration to Exchange Online or a supported version before October; after that date, unpatched RCE vulnerabilities will go unfixed on a historically targeted mail server.
SOC/IR — Skip
Leader — Plan: Confirm whether on-premises Exchange 2016/2019 remains in the estate; EOL removes the vendor’s security backstop and raises audit/compliance risk — budget and timeline for migration or decommission should be locked this quarter.

Fri, 17 Jul 2026 12:06:10 +0000

Engineer — Plan: Audit your Server 2022 inventory and document any features relying on mainstream-only support; no immediate patching action required since security updates continue through extended support until 2031.
SOC/IR — Skip
Leader — Plan: Note the October 2026 mainstream support end on your risk register and vendor lifecycle tracking; security patches continue, so no urgent action, but budget planning for eventual migration or extended support agreements should begin this quarter.