End-of-life software

Software or hardware that the manufacturer no longer supports with security updates, leaving any newly discovered vulnerabilities permanently unpatched.

Every product has a support lifecycle. Once a version reaches end of life, the vendor stops releasing fixes, even for serious security flaws. Microsoft, for example, ended standard support for Windows 10 in October 2025, and older Windows Server versions have also passed their end-of-support dates. The same applies to routers, firewalls, network storage devices and business applications.

Running unsupported systems is a common and serious risk in small businesses, often because the equipment still works or a specific application depends on it. Attackers actively look for known flaws in old systems, knowing they will never be fixed. Cyber insurers may also ask about unsupported software, and it can affect your coverage or premiums.

Practical tip: keep an inventory of your devices and software with their end-of-support dates, and budget for replacements a year or more in advance. If something truly cannot be replaced yet, isolate it from the internet and the rest of the network, and limit who can use it.