As announced in the Drupal 7 end-of-life announcement, changes have been made to the Drupal 7 security support policies - effective the 1st of August.
In summary:
The Drupal Security Team may post moderately critical and less critical issues affecting Drupal 7 in the public issue queue, as long as they are not mass-exploitable.
Drupal 7 branches of unsupported modules and themes are no longer eligible for new maintainership.
PHP 5.5 and below will no longer be supported on Drupal 7 (PHP 5.5 was end-of-life in July 2016).
Security fixes will no longer be provided for Drupal 7 Windows-only issues.
I'm an Acquia-certified Drupal Triple Expert with 17 years of experience, an open-source software maintainer and Drupal core contributor, public speaker, live streamer, and host of the Beyond Blocks podcast.