[aludd24]

Legacy or obsolete software, which stops receiving security updates after it reaches the end of life, can serve as potential fodder for cyberattacks. Despite this well known security risk, several firms continue to operate outdated software.

Here is the link: https://cyware.com/news/watch-out-hackers-are-after-legacy-software-5c76b0d3

Topic

[flo_zeeb]

Legacy systems are an issue everywhere and very difficult to protect. Often outdated critical systems support key business processes which requires to be available almost all the time.
Migrations to modern technology are complex and costly and would downtimes for the business.
Furthermore we see often resentence for change in the user community what makes it also difficult to get the support from them.

I have been in several situation were the business wants to keep the old systems just because it is more convenient to keep the status quo and focus on the core business.
In some cases IPS and NGFW can mitigate some of the vulnerabilities but the risk to run unsupported systems is huge and needs to be understood by the management to have the right mitigation strategy.

[Author]

Replies