Things like this obviously attract headlines, but the real problem comes from the millions of other machines, decades newer than the ones in TFA, that are still

Things like this obviously attract headlines, but the real problem comes from the millions of other machines, decades newer than the ones in TFA, that are still irredeemably EOL. I contract for a few companies that supply local governments in the UK. I regularly have to fill out stringent checklists about IT security provisions. PCI-DSS and beyond. So I always chuckle when we meet them on-site and they're running an XP install with IE8, plastered with toolbars. These are machines I would sooner throw into the abyss than try to rescue. They'll make me jump through hoops but there they are inputting and manipulating citizen data on machines that are almost certainly part of a botnet. Tablets are also increasingly a problem. As a b2b-service webdeb, I still see a lot of first gen iPad Minis in active service in enterprise. Last patched mid-2016. Oh well. The next big worm attack is going to be devastating to organisations like this.