Weakest in the herd EoL software and a journey to secure it
summary
EoL software creates concrete, exploitable risk: legacy XP fuels large ransomware campaigns and WannaCry 2017 ~200,000 infected, Python 2 and Windows 7 reach end of support leaving no patches, and vendors levy Windows 7 ESU pricing $50→$100→$200 per pro device. Detection and mitigation rely on specific actions not slogans — add EoL checks to risk assessments, inventory and PDCA cycles, and use EDRs like Carbon Black and Windows Defender to find and remove unsupported components, which helps cut dwell time from 197 to 56 days.
AI-written summary · about
chapters (14)
- 0:00Intro
- 1:31Overview
- 2:51EoL Philosophy
- 12:36How to identify EoL
- 18:36When to move on
- 22:01Risk factors
- 26:33End of life software headlines
- 32:20Aastha Sahni
- 33:27Possible Security Threats
- 36:55Advanced Persistent Threats
- 40:13Prevention Mitigation Strategies
- 43:09Plan Do Check Act
- 46:01SWOT Analysis
- 48:39Conclusion
related talks
35mEnd of Life of Software: Can expired milk become a security breach?
40mBeyond Living-Off-the-Land: Why XP Exploits Still Matter
33mLiving with Ransomware - The New Normal in Cyber Security
42mEnd of Life of Software: Can Expired Milk Become a Security Breach?
29mRendering Ransomware Detection and EDR Products Blind
33mAikido: Turning EDRs to Malicious Wipers Using 0-day Exploits
48mThe Five Most Dangerous New Attack Techniques
27m“Why are they asking me to do this?” or Adventures in IR Land