{"id":6685,"date":"2016-08-24T08:36:52","date_gmt":"2016-08-23T22:36:52","guid":{"rendered":"https:\/\/www.backupassist.com\/blog\/?p=6685"},"modified":"2016-08-24T08:36:52","modified_gmt":"2016-08-23T22:36:52","slug":"eol-products-are-a-server-security-risk-it-experts","status":"publish","type":"post","link":"https:\/\/www.backupassist.com\/blog\/eol-products-are-a-server-security-risk-it-experts","title":{"rendered":"EOL Software Risks Server Security; IT Experts"},"content":{"rendered":"

Software, like milk, has an expiry date.<\/strong> It’s called the software’s End of Life (EOL). And just like your milk, when it reaches this date it’s time to throw it out.<\/p>\n

It seems obvious when it comes to milk, but people have less hesitation holding on to out-of-date operating systems and software. What many people don’t realize is it’s just as bad, just to your server and business’s health.<\/p>\n

In fact, more than a whopping 99 percent of malware and viruses that target software vulnerabilities enter through your old, outdated software, according to BDNA<\/a> president Walker White. They do this by going after known weak points.<\/p>\n

“These products may remain on a network and are not removed because no one is using them, and no one has turned off their lights,” White said<\/a>. “A hacker will exploit that kind of leftover artifact.”<\/p>\n

Makes sense, right? It’s easier to go after an exploit you know exists rather than try to find a whole new one to exploit.<\/p>\n

Running EOL Software: Dangerously Common<\/h3>\n

Despite the obvious security risks in continuing to use EOL products, up to 50 percent of the average large business’s hardware and software is out of date, according to a BDNA report<\/a>\u00a0last month.<\/p>\n

When a software manufacturer declares the EOL for a product,\u00a0they no longer produce patches for security vulnerabilities in the product. That means running EOL software is like leaving your business’s back door unlocked\u00a0for hackers.<\/p>\n

The older your software is, the easier it is for hackers to mass-produce a key for it. And once inside, it’s not hard to take what they want\u2014from bank details to employee data.<\/p>\n

Hackers Search For EOL Software Users<\/h3>\n

A business may feel they are too small to be noticed by hackers, that they somehow need to be aware of the business to try hacking it. What they don’t realize is that hackers often develop and use automated scanning tools to scour the internet looking for systems containing vulnerabilities. An\u00a0unpatched, out-of-support device connected to the Internet is a security risk to your business.<\/p>\n

A great example of people using software after it’s EOL are users of Windows Server 2003<\/a> and Windows XP<\/a>. Since no more security fixes are now offered by Microsoft, both products are a minefield of security hazards<\/a>. Firewalls and anti-virus software are not sufficient protection against these unpatched vulnerabilities\u2014ones well known and coveted by hackers.<\/p>\n

Overworked IT Staff Are Often The Cause<\/h3>\n

The thing is, IT staff may not even know there’s EOL software remaining on some machines. There’s so much to do and so little time.<\/p>\n

“IT spends 80 percent of its resources just to keep the lights on and 20 percent on new development — if they’re lucky,” White said. “There may be a new version of a product, but because you don’t have a clear view of what’s in your environment, you can miss the old version in your upgrade process.”<\/p>\n

Many of them feel there’s no fundamental drive to change something that’s designed well and still works well for a fixed purpose. But again, running EOL software is like leaving your business’s backdoor unlocked every night. Just because nobody has broken in, doesn’t mean the situation is okay.<\/p>\n

What Can Be Done To Discover\u00a0EOL Products?<\/h2>\n