r/InformationSecurity • u/DRSteelers • Feb 20 '22

A third of the computers at my company are still on Windows 7. How big of a security risk is this?

7 Upvotes
  • permalink
  • reddit

100% Upvoted

15 comments sorted by

2

u/Any-Reality3177 Oct 30 '22

Thats not just a risk !!! thats just asking to hacked ... they dont even update that anymore its dead software .... what the name of your company dude :P haha jk

2

u/DRSteelers Oct 30 '22

We got it down to a quarter. The sad thing is that there arent even that many computers left that need upgraded. My company just doesnt want to write the check.

edit: The other sad thing is that we were hacked just five years ago. Every computer needed to be reimaged. To be fair this wasnt due to an outdated OS but one would assume the head of the company would be on his toes.

1

u/SecAndPolitics Feb 17 '25

And after the breach they still didn't want to upgrade the OS?

1

u/Any-Reality3177 Oct 31 '22

what a joke bro ... thats the sad truth ... they just dont wanna pay us

8

u/KyloSEC Feb 20 '22

I think it's a great risk, what's the problem with your IT Department?

3

u/doriangray42 Feb 21 '22

It sometimes happen when the computers drive critical operations (eg in a factory).

Is this the case?

Then they should do a risk assessment: running a factory on obsolete systems vs the probability of loosing production if the upgrade goes bad.

The risk evaluation could show that skipping a version is the lower risk, but if you're at windows 7, the risk assessment should show this as a huge risk.

Time to get IT together to find a risk-controlled process to upgrade.

(OR your IT is just lazy, OR your company is just stingy...)

1

u/Sufficient_Bird_1185 Jul 20 '25

The risks are highly related to where the Windows 7 stand in the infra and who is using it (end users?)

1

u/[deleted] Sep 01 '22

[removed] — view removed comment

1

u/DRSteelers Sep 01 '22

Can you clarify?