Threat Intelligence

Abandoned Software Can Still Put Millions of Machines at Risk

Dark Reading · 31 Oct 2026
Key Takeaway Audit the software on your business devices, and remove or replace any old or unsupported applications that no longer receive updates.

A security firm has patched a decade-old application to stop attackers from taking over millions of machines. The case, reported by Dark Reading, shows how software that is no longer actively maintained can still pose a serious security risk long after its developers have moved on.

The report points to abandoned domains as a key part of the problem. When a project is left behind, the domains it relies on can remain a valuable opportunity for attackers. Old software may continue to run on many devices, even though no one is looking after it.

The source summary does not give further technical detail, but the lesson is clear for businesses of any size. Software that has been forgotten, unsupported or left running in the background can become an easy way in for attackers.

Answering to more than one framework? Run them as one security and AI governance programme ->

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.