Security firm Rapid7 has published a report that says FTSE 250 companies are particularly vulnerable to attacks by hackers as they struggle to keep their systems up to date. Specifically, the report says there are 35 different points in the companies' systems software that could be exploited by hackers.
The security firm scanned the systems and devices used by companies in the FTSE 250+ Index. These 35 different points are neither good nor bad. However, they can help hackers gain ground and launch an attack.
Every exposed server or device is a risk, so it must be properly configured, patched, and updated. This way, the chances of an attack will be reduced.
According to the report, “FTSE 250+ organisations, across all sectors, are facing serious problems with updating systems . A very large number of large companies in the UK are using old and often unsupported versions of various web servers.
Rapid7 said that companies and organizations should prioritize updating their software and systems in general.
Using older versions of software on the Internet can be very dangerous for a company's security. Many times, updates that fix a large number of vulnerabilities are available, but companies do not use them. This was also the case with WannaCry. The vulnerability that the ransomwarecould have been addressed. The update was available months before the attack, but many companies did not take care to update their software in time.
A few days ago, the NSA warned Windows users to update their systems to the latest version, as there is a vulnerability, known as BlueKeep, which affects older versions of Windows and could be used by hackers to spread malware.
