ATMs have a problem called Windows XP

Despite rapid technological advancements, many critical systems across the world still rely on obsolete operating systems, creating serious risks. Among the most notable examples are ATMs, which in many cases continue to run on Windows XP—an operating system released more than two decades ago.

Outdated systems still power essential infrastructure

ATMs in Europe and beyond are often anchored to outdated systems like Windows XP or even Windows NT, which dates back to 1993. This isn’t due to laziness or nostalgia but to high costs, regulatory hurdles, and software dependencies that make updates extremely difficult. Elvis Monteiro, an expert in ATM systems, emphasizes that updating involves expensive hardware compatibility checks and rewriting proprietary software, processes most banks are reluctant to undertake.

Security risks remain a major concern

Even as newer systems like Windows 10 IoT Enterprise are introduced, a large number of machines still run Windows 7 Embedded or XP, exposing them to known vulnerabilities. Since these systems no longer receive updates, they are prime targets for cyberattacks, especially those involving sophisticated intrusion techniques. Their presence in public and financial infrastructure turns them into critical weak points.

Not just ATMs: A global issue across sectors

This issue extends far beyond ATMs. Trains in Sweden, airports in France, hospitals in the U.S., and public offices in Spain still rely on Windows 95, MS-DOS, and even diskettes. The reason is always the same: if the old systems still work, organizations hesitate to change them, fearing operational disruptions and huge upgrade costs.

The result is a paradox: our most modern societies quietly run on fragile, outdated foundations, sustained by legacy software that’s well past its prime.