All News

Consumer Reports Urges Microsoft to Extend Windows 10 Support

Consumer Reports has urged Microsoft to extend free security updates for Windows 10 beyond the October 14 cutoff, arguing that up to 200–400 million PCs can’t upgrade to Windows 11 and will be ‘stranded.’ The group and PIRG warn of security risk, waste, and financial strain from a hard deadline and criticize Microsoft’s paid extension and upgrade push.

Published September 16, 2025 at 05:14 PM EDT in Cybersecurity

Consumer Reports pushes Microsoft to extend Windows 10 security updates

Consumer Reports has asked Microsoft CEO Satya Nadella to keep free security updates for Windows 10 available past the company’s October 14 cutoff, arguing that ending support will “strand millions of consumers.” The organization points to data showing about 46.2% of PCs still run Windows 10 and that between 200 and 400 million machines can’t meet Windows 11 hardware requirements.

In its letter Consumer Reports calls Microsoft “hypocritical” for urging upgrades to improve cybersecurity while cutting off protections for devices that cannot upgrade. The group criticizes Microsoft’s $30 fee for a one-year extended security update and warns that free support routes that push users into Microsoft products effectively lock people in to the company’s ecosystem.

A Public Interest Research Group (PIRG) has echoed the call, saying as many as 400 million usable computers might be discarded because they can’t upgrade. Both groups frame the deadline not only as a security issue but as an environmental and economic one: forced retirements increase e‑waste and can impose unexpected costs on households, schools, and small businesses.

Security professionals warn that ending updates widens the attack surface. Unsupported systems no longer receive patches for newly discovered vulnerabilities, which can multiply risks for consumers, public-sector networks, and small organizations that lack fast replacement budgets or centralized IT.

  • Higher malware and ransomware exposure for unpatched machines.
  • Potential spike in e‑waste as users replace otherwise functional PCs.
  • Financial strain on low‑income households and small organizations facing forced upgrades.
  • Widening of the digital divide for users who can’t afford or don’t qualify for newer hardware.

Microsoft has tried to mitigate the fallout by offering extended security updates (ESUs), but Consumer Reports and PIRG argue that charging or making extensions conditional leaves vulnerable populations exposed. The groups want a free extension until a significantly larger proportion of users can transition to Windows 11 without being forced into premature hardware disposal.

For organizations and IT teams the immediate task is triage: identify devices that cannot upgrade, measure their exposure, and apply compensating controls—network segmentation, endpoint protections that don’t require OS upgrades, or browser and app hardening—while planning longer term refreshes.

QuarkyByte’s approach is to combine device telemetry, usage patterns, and cost modeling to create a prioritized roadmap: which machines need immediate protection, which can wait for scheduled hardware refreshes, and which users need assistance to transition. That analysis helps limit waste, reduce security exposure, and allocate budget where it delivers the most risk reduction.

Microsoft’s decision will ripple across consumers, enterprises, and public institutions. Balancing security best practices with fairness and sustainability is the core challenge. Whether the company extends free updates, adjusts pricing, or partners on transitional programs, the debate spotlights how OS lifecycles intersect with cybersecurity, economics, and environmental concerns.

Keep Reading

View All
The Future of Business is AI

AI Tools Built for Agencies That Move Fast.

QuarkyByte can quantify the exposure across Windows 10 fleets, prioritize devices for mitigation, and model cost-versus-risk for extended support or staged upgrades. Work with our analysts to design a targeted, data-driven plan that reduces breach risk, limits e-waste, and protects budgets.