[MadScientist]

As of October 14, 2025, if your PC is still running Windows 10, it will be left in an unsecure state and vulnerable to any security holes that are discovered in the OS after that date. ALL Windows 10 users across Home, Pro, and Enterprise editions are impacted by this end-of-support date. Everyone using these editions of Windows 10 will need to take action manually to ensure their devices remain secure beyond October 14.

Luckily, there are a few things you can do to make sure your Windows 10 PC remains secure beyond October 14. Microsoft has launched an extended security updates (ESU) program that will let users enroll their PC in receiving extra security updates for another year, until October 2026, for consumers.

Source - https://www.windowscentral.com/microsoft...ol-esu-faq

[Chorozon]

Imagine the 0 days that are going to come out for windows 10 , still massive amount of machines are using it as well

[MadScientist]

Imagine the 0 days that are going to come out for windows 10 , still massive amount of machines are using it as well

That was my first thought so many people still use it, There's gonna be a lot of people working really hard on new zero days. I'm finally biting the bullet and moving to 11 unfortunately.

[Hackers]

Imagine the 0 days that are going to come out for windows 10 , still massive amount of machines are using it as well

https://hackforums.net/showthread.php?tid=6291588

> not extremely easy to use, but it did work for me

AFAIK, Microsoft said this UAC bypass is not a security vuln because it only bypasses the visual confirmation screen for users who could elevate perms manually.
There are most likely a lot of UACs still available because MS doesn't consider a UAC / auto-elevation as a security problem in Win 10

---

I agree that Win10 is going to have major issues w/o the security upgrades.

Chain attacks like the one I just mentioned will be used even more. The downside to chain methods has always been complexity, and chance of patches... There's now all the time in the world and no patches coming. I'm sure people will find more

[Chorozon]

https://hackforums.net/showthread.php?tid=6291588

> not extremely easy to use, but it did work for me

AFAIK, Microsoft said this UAC bypass is not a security vuln because it only bypasses the visual confirmation screen for users who could elevate perms manually.
There are most likely a lot of UACs still available because MS doesn't consider a UAC / auto-elevation as a security problem in Win 10

---

I agree that Win10 is going to have major issues w/o the security upgrades.

Chain attacks like the one I just mentioned will be used even more. The downside to chain methods has always been complexity, and chance of patches... There's now all the time in the world and no patches coming. I'm sure people will find more

This was the weirdest coincidence as i was working on a UAC bypass as you sent it , thanks man i will give it a read

[Hackers]

This was the weirdest coincidence as i was working on a UAC bypass as you sent it , thanks man i will give it a read

Haha, that's how it goes!

That bypass is complicated, but LMK if you have any questions in that thread. The gist of it is that you can remap the system32 directory using a symlink method to trick it.

I will look to see if I can find my own source, I lost my dev machine this summer and may not have my final copy ://

[Chorozon]

Haha, that's how it goes!

That bypass is complicated, but LMK if you have any questions in that thread. The gist of it is that you can remap the system32 directory using a symlink method to trick it.

I will look to see if I can find my own source, I lost my dev machine this summer and may not have my final copy ://

Literally tripped me out for a second haha

I am reading up on it now , if you can find your own source and want to put it up on github i will have a read

Aww man VM died i am guessing ?

[Jinu]

In my working place I have very old machine i7 4th gen. And still on Win10. Not possible to upgrade as this system doesn’t have TPM and incompatible CPU.

[psickophant]

I am not surprised by Microsoft doing this. Their customer service has always been top-notch. LOL!!! I would not be surprised if they made a deal with hardware manufacturers since now there are going to be a bunch of people saying, "Guess I'll just buy a new computer. Upgrading is too much of a hassle.". I read that 22% of PCs in the wild still run Windows 10. What do you all think?

[MadScientist]

I am not surprised by Microsoft doing this. Their customer service has always been top-notch. LOL!!! I would not be surprised if they made a deal with hardware manufacturers since now there are going to be a bunch of people saying, "Guess I'll just buy a new computer. Upgrading is too much of a hassle.". I read that 22% of PCs in the wild still run Windows 10. What do you all think?

I believe it , I was still running Windows 10 when I posted this. I wouldn't be surprised if the number is even higher to be honest

[Deany]

Good, sick of them bugging me about it

[Prepper]

That was my first thought so many people still use it, There's gonna be a lot of people working really hard on new zero days. I'm finally biting the bullet and moving to 11 unfortunately.

I been running Windows 11 pretty much since launch, it has its bugs, it certainly isn't the smoothest, but overall it isn't too much different from Windows 10.

Just like Windows 10 it carries over a bunch of outdated shit dating back to XP, it seems thrown together and like Microsoft doesn't care about refining it, they frequently push updates that cause problems, recently it was causing SSD failures.

I am not sure what the hell is going on at Microsoft but honestly it is making me want to switch to Mac, the Mac Mini M4 is a badass little machine and the M5 version is likely around the corner.

[DewGho]

some of my VMware machines are still running on Windows 7 )

[MadScientist]

some of my VMware machines are still running on Windows 7 )

Dayum thats YOUR vnc I came across eh? :-P jk jk. Still running newer software fine?

[JoshAllen]

Couldn't someone be withholding an exploit until they stop support, and attack then?