Unsupported software is a product that no longer receives active security fixes from its vendor. It may still run normally, but new vulnerabilities discovered after support ends are unlikely to be patched. That makes the software a growing risk over time, especially on internet-connected devices.
In cyber security, unsupported software matters because patching is one of the main ways defenders reduce exposure. Attackers often look for old operating systems, browsers, server apps, or plugins that are no longer maintained, since known flaws can remain open indefinitely. Defenders treat these systems as higher-risk assets, inventory them, segment them from critical networks, and plan migration to a supported version. When replacement is not immediate, extra controls such as restricted access, monitoring, and isolation help reduce the attack surface, but they do not replace vendor patches.