Why Outdated Maintenance Software Is a Growing Ransomware Risk

This advisory explains how legacy maintenance and computerized maintenance management systems (CMMS) have become attractive ransomware targets because they store operational intelligence, often run on unsupported software, use weak access controls or shared accounts, and are connected to remote access and vendor portals; it details how attackers can use that information to time extortion and recommends inventorying systems, tightening access (MFA, remove shared admins, vendor account reviews), improving patching and isolation for unsupported platforms, and testing recovery plans and offline backups.