Consider this a reminder that end-of-life software doesn’t get patches: researchers have turned up more than 1,400 vulnerabilities in a widespread automatic medical supply dispensing system from CareFusion, because old units are still running Windows XP.

The computer-controlled dispensing cabinets are installed in hospitals and pharmacies around the world. In large deployments, they can be connected as a network of dispensary workstations that report usage in real time – incidentally providing a vector for remote attacks.

Legion of Demons Found in Ancient Auto Medical Supply Dispensing Cabinets