alt Hacker NewsCore banking may be more resilient because it runs on software that's so antique and obscure it's not going to be easy to find the code to attack.
Also banks are more likely to take basic security seriously and not leave core services open to the public internet, even if the code itself is full of bugs.
On the other hand, running old software where the code is publicly available, on hardware connected to the internet - you are cooked
Replies
Having worked at various places, I think financial institutions are actually very rigorous when it comes to testing and fixing bugs. It has little to do with whether they're still running COBOL or not.
These cyberattacks are going after systems that barely even needed to exist in the first place, so of course they're insecure. In my opinion, this is a correction that was decades overdue. Either take your software seriously or don't bother at all. I'm surprised it took this long.
> Also banks are more likely to take basic security seriously and not leave core services open to the public internet
You'd think so but I've seen banks leave compromised systems on their network for months after they were notified about them, including ones being used in botnets. One bank had even been temporarily disconnected by their ISP to stop the spam/hacking leaving their network, but they said they didn't care because it was just their backup connection in case their other ISP went down.