Cyber Risks · Unit 42 Palo Alto Networks

Windows XP, Server 2003 Source Code Leak Leaves IoT, OT Devices Vulnerable

Summary: On Sept. 24, 2020, the source code for Windows XP and Windows Server 2003 was leaked and posted on file-sharing sites including Mega and 4Chan, making broadly available code for operating systems Microsoft stopped supporting in 2014 and 2015. Unit 42 reports that 83% of medical imaging devices run on unsupported operating systems, with Windows XP still on 11% of imaging devices, and that 12% of segments containing medical devices include at least one device on an outdated Windows version.

Bottom line: A single Windows XP CT scanner on an otherwise well-segmented medical VLAN exposes every other device in that segment, and 72% of the unsupported Windows IoT devices Unit 42 observed had been detected more than three months earlier without being remediated.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related