GCHQ warns against Windows 7 for email, banking
.png)
Windows 7 should not be used for sensitive tasks, such as banking or email, after the decade-old software hits end of life tomorrow (14/1/2020), the British government's security service has warned.
The National Cyber Security Centre (NCSC), the public-facing arm of GCHQ, issued the warning ahead of Microsoft ending extended support for the ten-year-old operating system on 14 January, meaning Windows 7 will no longer get any security updates and that flaws will go unpatched and left open for hackers. Businesses will still be able able to pay to get security updates for the next three years.
"The NCSC would encourage people to upgrade devices currently running Windows 7, allowing them to continue receiving software updates which help protect their devices," an NCSC spokesperson told The Telegraph.
"We would urge those using the software after the deadline to replace unsupported devices as soon as possible, to move sensitive data to a supported device and not to use them for tasks like accessing bank and other sensitive accounts," the spokesperson added. "They should also consider accessing email from a different device."
The NCSC noted that criminals started targeting Windows XP immediately after extended support ended in 2015, though Microsoft has issued a handful of emergency patches for serious vulnerabilities despite officially ending support.
As of the end of 2019, Windows 7 was still used on 27% of desktops and laptops globally, according to Net Applications' Market Share, while 55% were on the most recent version, Windows 10. Indeed, a tiny slice, just over 2%, remain on Windows XP.
That includes consumer devices around the world, but Kaspersky warned last year that as many as half of small businesses still use older operating systems, such as Windows 7, despite the significant security risk. That's partially down to cost and dependence on apps unsupported on newer systems, but also down to habit, the security firm said. This is despite a number of high-profile attacks such as WannaCry, which targeted Windows 7 machines.
For those who prefer to plan ahead, Microsoft has already announced that it will end support for Windows 10 in 2025.
source itpro
Industry: Cyber Security
Latest Jobs
-
- Senior Cyber Risk Consultant, UK - Remote first- Exclusive
- United Kingdom
- Depended on experience.
-
Cyber Security Risk Consultant to join specialist, people first security consultancy. WARNING if you want a large, slow moving, high politics, high travel security consultancy that demands their a pound of flesh this is NOT for you. Client focused opportunity. Prior consulting experience is essential within Cyber Security. Experience working with businesses to identity and make recommendations to mitigate cyber risk. Some of the nice to have certifications. CRISC, ISO27001 Lead implementer, CISA, CISM, CISSP UK based - remote first mentality. (With some travel) Training budget Unlimited holiday Looking to interview immediately Unable to offer sponsorship.
-
- identity access Management Consutlant
- N/A
- Upto £80,000 plus benefits
-
An Identity & Access Management Consultant is needed for an expanding business based in the United Kingdom. (Remote role with monthly office meet ups) The Identity & Access Management Consultant will be responsible for the technical design and implementation of Identity & Access Management/IAM products for a wide variety of clients. Deliver bespoke end-to-end consultancy service to our clients, from gathering requirements through to implementation. Work in a close team designing, developing, and implementing first-class IAM solutions. Manage client relationships, working closely with key stakeholders to continually evaluate business requirements and ensure the highest quality solution delivery. If you are interested we are looking for an individual with Previous experience working within the IAM or CIAM field is essential, Strong knowledge with SAML and Oauth and ideally OpenID Previous experience from any of these technologies: One Identity, SailPoint, Saviynt, Ubisecure, Ping Identity, would be advantageous
-
- 17'5 NOT 4 7R4P | Pen testing Lead 100k++
- London
- 100000+
-
Lead Penetration tester wanted please. - This is however a Master level as appose to padawan. 1. 100k+ for the skilled individual. 2. Research / training time 3. Hybrid role- 3 days at home 2 in the office with the team in London. (11am - 16:00) 4. Exclusive opportunity. So yours to hear about if you are quick. Infrastructure and Web application / red teaming pen testing experience Someone that can scope, deliver and speak to clients.
-
- It's Pen Testing, The good, the bad and the ugly
- United Kingdom
- 105000
-
A new lead Pen Testing opportunity, AND slightly different from the usual you may see. The good, the bad and the ugly… Lalalalala la laa laaaa The GOOD 1. £90-110k for the skilled individual. 2. Research / training time 3. Hybrid role- 3 days at home 2 in the office with the team in London. (11am - 16:00) 4. Exclusive opportunity. So yours to hear about if you are quick. The bad 1. You have to apply or email me so we can speak. 2. 17'5 NOT 4 7R4P or click bait The ugly 1. It’s only ugly if you don’t reply and someone else you know gets it. Infrastructure and Web application / red teaming pen testing experience Someone that can scope, deliver and speak to clients. Apply today for more information.