Congress heard this morning that Sony was using outdated software on its servers for months prior to the recent PSN hacks.

Speaking to the House Subcommittee on Commerce, Manufacturing and Trade yesterday, Dr. Gene Spafford of Purdue University said that Sony had been using outdated software on its servers for months, and that nothing had been done about it.

Spafford claimed that security experts had spotted Sony was using outdated versions of the Apache Web server software and had no firewall installed. The issue was apparently "reported in an open forum monitored by Sony employees" some two to three months before the recent breaches.

Full story: GamePro