Critical infrastructure providers and small and medium businesses continue to operate the outdated Microsoft OS without security updates and patches.