State of the Endpoint: Vulnerable Software, Click-Happy Users

DUO's Trusted Access Report analyzing millions of desktop and mobile endpoints finds large-scale insecure configurations and human-vulnerability: a majority of Windows endpoints remain on older OS versions (59% on Windows 7), over half of Flash installations are outdated, and phishing remains highly effective (≈25% click rate; >10% entered credentials). The report highlights industry-wide variability (healthcare lags, tech leads), mobile OS fragmentation (Android trailing iOS), partial mitigation trends (many disabling Java/Flash), and emphasizes persistent exposure due to unpatched software and successful phishing campaigns.