Today’s Windows update is the last regular security update for Windows 11 version 24H2 Home and Pro. Microsoft’s lifecycle page says support ends at 6:59 AM PT Wednesday, Oct 14. Nobody is attacking 24H2; after Wednesday it simply stops getting fixes. Newer versions keep going: 25H2 through October 2027 and 26H2 through October 2028. Microsoft’s October fixes are due later today. To check your PC, open Settings > System > About and look at “Version.” If it says 24H2, go to Settings > Windows Update, install today’s update and restart. Then click “Check for updates” again and, when a newer Windows 11 version (25H2 or 26H2) is offered, choose “Download and install.” Microsoft’s release notes say 26H2 is rolling out in phases over the next few months, so not every PC will see it yet. Turning on “Get the latest updates as soon as they’re available” can bring it sooner. If nothing is offered, check again in a few days rather than forcing it.
IT managers: pull a report of 24H2 Pro machines, which are common in small offices, from Intune, WSUS or your RMM, and schedule their feature update to 25H2 or 26H2. Pro machines that Windows Update for Business keeps paused on 24H2 fall out of support after today. Test first: Microsoft lists an open known issue where some apps that use Dolby Digital (AC-3) audio may close unexpectedly after updates released since Sept 22, on 24H2, 25H2 and 26H2. 24H2 Enterprise and Education are not ending; Microsoft supports them until October 2027. 23H2 Enterprise and Education get their last update with November’s Patch Tuesday, Nov 10.
SAP shops: SAP’s October patch day fixes 20 security issues (16 new notes and 4 GitHub advisories), four of them rated critical. The worst, rated the maximum 10, is in the SAP Cloud SDK for Python, which developers use to build apps on SAP’s cloud platform (BTP). Versions before 0.45.2 could leak an app’s credentials to an outsider in multi-tenant setups. The other critical fixes cover NetWeaver Visual Composer, an S/4HANA rules app, and Manufacturing Integration and Intelligence. SAP hasn’t reported any attacks, and none of these are on CISA’s exploited list. Ask your SAP Basis team or partner to apply the October notes this cycle, starting with Visual Composer, S/4HANA and MII if you run them. Developers on BTP should upgrade the Python SDK to 0.45.2 or later, or use SAP’s interim workaround until they can. Don’t wait for a quarterly window: BleepingComputer notes that a different SAP flaw was exploited in August, days after its fix. There is nothing here for everyday consumers.