End-of-life support is the point in a product’s lifecycle when the vendor stops issuing security updates, bug fixes, and often technical support. The software may still run, but it is no longer maintained as a secure platform. For defenders, that creates a hard problem: vulnerabilities discovered after end of life usually cannot be patched by the vendor, so exposure can persist indefinitely.
In cyber security, end-of-life systems are attractive targets because attackers know that public exploits, weak configurations, and old dependencies may remain uncorrected. This is especially dangerous for internet-facing appliances, servers, and embedded devices that are difficult to replace quickly. Defensive options shift from patching to risk reduction: upgrading to a supported version, isolating the asset, restricting network access, compensating with monitoring, and planning retirement before support ends. A strong asset inventory is essential, because teams cannot protect what they do not know is unsupported.