December 5th, 2015, 21:52 PM
UK cash machines at risk as Windows XP Embedded support cut-off looms
Many of the UK’s 70,000 cash machines face major security risks next year as Microsoft is set to withdraw support for the Windows XP Embedded system in use on many ATMs.
The support cut-off will take place on 16 January and means that no more security updates are due for the software. As such, banks and other ATM owners will need to upgrade their systems before this deadline.
"Windows XP Embedded Service Pack 3. This is the original toolkit and componentised version of Windows XP. It was originally released in 2002, and Extended Support will end on 12 January 2016," said Microsoft's support page.
However, as the end of support for Windows XP demonstrated, many organisations are slow to act on such warnings, and numerous Windows XP machines are still in operation on corporate networks, often at great cost.
The situation is likely to be the same for ATMs, which security firm Abatis said will pose serious security risks.
“This presents major problems for the banks and puts their customers’ cash at risk, which is the last thing anyone wants as they check their accounts after a costly Christmas and early sales,” said Abatis CEO Kerry Davies.
V3 contacted Link, the trade association responsible for cash machines in the UK, for its response to these concerns.
It said it has been working with members to transition from Windows XP Embedded ever since Microsoft first announced the support deadline.
“All Link members have fully considered this issue, and have plans in place for dealing with the withdrawal of Windows XP support," it said.
“A number of Link members have already migrated to Windows 7 while a number of others are well advanced with their migrations and will complete early 2016. Others are performing their changes along with much bigger platform change projects and their implementations will be later in 2016."