HomeIntelligenceBrief
BREACH BRIEF🟡 Medium Advisory

Windows Server 2022 Enters Extended Support in October 2026 – Upgrade to Server 2025 Required

Microsoft will move Windows Server 2022 to extended support on 13 Oct 2026, ending mainstream updates. Organizations must plan migrations to Server 2025 to stay within supported software, a key SOC 2 requirement for system security and change management.

LiveThreat™ Intelligence · 📅 July 17, 2026· 📰 bleepingcomputer.com
🟡
Severity
Medium
AD
Type
Advisory
🎯
Confidence
High
🏢
Affected
5 sector(s)
Actions
4 recommended
📰
Source
bleepingcomputer.com

Windows Server 2022 Enters Extended Support in October 2026 – Upgrade to Server 2025 Required

What Happened – Microsoft announced that on 13 Oct 2026 Windows Server 2022 will reach the end of its mainstream support phase. After that date the product moves to extended support, receiving only security‑only updates through 14 Oct 2031. Customers are urged to begin planning migrations to Windows Server 2025, the current LTSC release.

Why It Matters for Compliance & Audit Readiness

  • SOC 2 Security criteria (CC6.1 System Operations, CC6.2 Change Management) require that production systems remain fully supported; operating on an out‑of‑mainstream product can be viewed as a control weakness.
  • Continuous‑compliance programs must capture upgrade plans, patch‑management evidence, and lifecycle documentation as audit‑ready artifacts.
  • Verisq’s Control‑Mapping capability lets you map OS lifecycle dates to the relevant SOC 2 controls and automatically collect evidence of upgrade testing and patch status.

Who Is Affected – Enterprises that run Windows Server 2022 across any sector – technology SaaS providers, financial services, healthcare, retail, manufacturing, and government agencies.

Recommended Actions

  • Inventory every Windows Server 2022 instance and tag its support status.
  • Align the upgrade timeline with your change‑management process and record approvals.
  • Use automated evidence collection (patch logs, test results) to satisfy SOC 2 control testing.
  • Validate that extended‑support updates remain in place until the full migration to Server 2025 is complete.

Source: BleepingComputer – Windows Server 2022 reaches end of mainstream support in 90 days

Technical Notes – No new vulnerability is disclosed; the change is purely a product‑lifecycle transition. Microsoft will continue to provide security‑only patches under extended support (no feature updates). The last mainstream update is scheduled for October 2026; extended‑support updates continue through October 2031.

📰 Original Source
https://www.bleepingcomputer.com/news/microsoft/windows-server-2022-reach-end-of-mainstream-support-in-90-days/

This LiveThreat Intelligence Brief is an independent analysis. Read the original reporting at the link above.

From the Verisq platform · Trust Operations

Every gap like this maps to a control you can evidence.

The Verisq AI Trust Operations platform maps incidents to your control framework and collects the evidence continuously — so your Trust Center shows proof, not promises, when a buyer or auditor asks.

Explore the Verisq AI Trust Operations platform →