Could the end of Windows 10 be a security risk?

While devices will still run, organisations continuing to rely on Windows 10 will face growing vulnerability to cyber threats. This transition presents a strategic chance for you to be proactive and steer your clients toward stronger security postures.

Windows 10 is still widely in use across businesses

Despite the impending End of Support, many organisations remain on Windows 10. A recent ControlUp report found that 50% of enterprise-managed Windows devices have yet to upgrade, compared to 80% a year earlier. This highlights both progress and persistent gaps, especially in sectors like healthcare and finance . Global market-share data echoes this: Windows 10 still accounted for 43% of desktop usage in August 2025, with Windows 11 at 53%.

The escalating security risks

Using unsupported software is not just outdated, it is inherently risky. Organisations running End of Support systems are highly attractive targets for attackers, as they no longer receive patches for newly discovered vulnerabilities. Indeed, exploits of known vulnerabilities now account for 20% of initial breach vectors, on par with stolen credentials. In essence, an unpatched Windows 10 machine is like an open door for threat actors.

Proactive risk management

Microsoft recommend some steps your clients should take as they manage this risk. They might not be aware of all of these, so it’s worth checking in with them to ensure they’re considering the following:

Upgrade to Windows 11: A forward-looking choice that restores patch-level security and brings enhanced protection and performance.
Extend via ESU: Microsoft’s Extended Security Updates (ESU) program offers a temporary lifeline. Business devices can enrol, though pricing doubles annually, so it is best viewed as a bridge, not a destination.
Prepare for hardware replacements: Where older machines fall short of Windows 11 requirements, advise your clients on phased hardware refreshes or strategic upgrades such as RAM or storage.

These actions align with prudent underwriting principles, mitigating exposure to cyber risk by encouraging current, supported software in client environments.

Practical Steps to guide your clients

If you want to give actionable advice that will help your clients, advise them to focus on the following;
Audit device fleet: Identify Windows 10 end-points and assess upgrade eligibility
Promote staged transition plans: Encourage your clients plan workflows that combine device upgrades, ESU enrolment in the short term, and eventual full migration.
Reinforce insurance narratives: Emphasise that clients maintaining up-to-date systems demonstrates proactive risk management and may influence coverage terms positively.

By turning attention to Windows 10’s End of Support now, you can help clients confidently navigate the change, strengthening cyber resilience while reinforcing the value of risk-aware decision-making.

To find out more about cyber risk, get in touch with our team.