Undead Operating Systems Haunt Enterprise Security Networks

According to runZero, it is a practical reality that enterprises have systems with older operating system versions running in their networks, with 8.56% of assets on end-of-life OS and 5% of all observed assets already beyond security support as of Sept. 30. Windows 10 officially enters end-of-life on Oct. 14, meaning those machines will no longer receive security updates, a significant concern given that one-third of all Windows systems worldwide are still on Windows 10.

Beardsley of runZero cautions that the baseline number of end-of-life systems could almost triple on Oct. 14, highlighting how attackers may exploit unpatched vulnerabilities as patches stop arriving. The article notes that end-of-life does not mean instant failure, but stresses that vulnerabilities discovered after that date may remain unpatched, increasing the attack surface for enterprises.

It also points out that organisations should establish a realistic baseline and assess whether they have more end-of-life systems than the norm, to gauge risk and prioritise remediation efforts.