Microsoft quietly extends free Windows 10 ESU support to October 2027
2026-06-25T19:23:31Z•b98d0c3b69d1ac67ac5a1e7fab30baca2c4f805222c904ad5a33db3c3fa1119c
AI-evasionBluekitCISA warning`,`Amadey`,`StealC`,`Operation Endgame`,`Mistic`,`KCVE-2026-20230CVE-2026-20245CiscoCisco Unified CMESUEdgecutionGaslightPirloTVSD-WANUbiquitibackdoorbrowser-exploitbrowser-in-the-middlemacOSmalwarenative-messagingphishingpiracyprompt-injectionransomwaretakedownwindows10
What happened
Multiple security and privacy stories: Microsoft quietly extended free Windows 10 Extended Security Updates (ESU) for consumers through October 12, 2027. New macOS malware dubbed "Gaslight" hides prompt-injection strings and fake debug data to confuse AI-assisted analysis. The Bluekit phishing-as-a-service kit added browser-in-the-middle capabilities for improved credential theft, while a malicious Edge extension ('Edgecution') abused Native Messaging to escape the browser sandbox and deploy a Python backdoor used in ransomware incidents. Law enforcement disrupted PirloTV infrastructure (44+ .
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b98d0c3b69d1ac67ac5a1e7fab30baca2c4f805222c904ad5a33db3c3fa1119c
- Enrichment time
- 2026-06-25T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.