The Silent Threat: 85% of Small Business Computers Run with Active Security Alerts

A new report based on anonymous monitoring data from XIT reveals a troubling reality for the small business sector. In a recent audit of 13 monitored endpoints, 11 out of 13 computers, approximately 85%, were found to be operating with at least one active security alert. Only 8% of the devices were classified as fully healthy and alert-free during the latest measurement period.

While the sample size represents a specific segment of small businesses in Israel, the findings serve as a microcosm for a global problem. Small and medium enterprises (SMEs) often lack dedicated IT departments, leading to a dangerous gap between operational needs and actual cybersecurity posture. In an interconnected global economy, a single unpatched computer in a small office can serve as a beachhead for larger supply-chain attacks.

The Update Gap: Exploited Vulnerabilities in the Wild

The most alarming findings involve the mismanagement of system updates and vulnerabilities. According to the data, 5 out of 13 computers are currently awaiting system updates. While the raw number seems small, the implications are severe. Cross-referencing these endpoints with international databases such as CISA's Known Exploited Vulnerabilities (KEV) and the National Vulnerability Database (NVD) identified 240 open vulnerability findings across 12 computers, encompassing 28 unique CVE identifiers.

Critically, 17 of these vulnerabilities have already been exploited "in the wild" according to CISA. Notable findings include CVE-2025-0411 in the 7-Zip utility, which carries a high exploitation probability of 47.6%, and various flaws in common tools like Notepad++. Perhaps most concerning is the presence of CVE-2020-0878, a vulnerability in Microsoft Edge dating back to 2020. This indicates a long-term failure in both manual and automated update processes.

Furthermore, 23% of the monitored fleet is running unsupported operating systems, including older versions of Windows 10 or earlier. These machines will never receive another security patch, making them permanent targets for attackers who exploit kernel-level weaknesses or outdated communication protocols.

System Stability and the Cost of Neglect

Beyond the immediate threat of a cyberattack, the data highlights maintenance issues that directly impact business productivity. Approximately 38% of the computers suffer from driver errors, and a similar percentage are waiting for general software updates. Over the last 30 days, five "Blue Screen of Death" (BSOD) events were recorded, and 120 system errors were logged in the Event Viewer in just a single 24-hour period.

Performance metrics show that while average RAM consumption sits at 52%, some machines are under critical loads exceeding 85%, leading to significant slowdowns. A major contributor to this instability is the lack of system reboots. The average uptime between restarts is 197 hours, with one machine remaining active for over 720 hours, or a full month. Failing to reboot prevents the application of critical security patches and allows memory errors to accumulate, eventually leading to sudden crashes.

Storage management also poses a risk, with one computer reported to have less than 15% free disk space. A full disk does more than slow down a machine, it can prevent security systems from writing log files, stop software updates from downloading, and lead to data corruption during unexpected shutdowns.

The Business Reality

For a small business, every single workstation represents a significant percentage of the total workforce. The XIT data suggests that the risks are not merely theoretical. Ransomware actors specifically look for these unpatched systems running outdated third-party software to gain their initial foothold. Professional consensus remains clear: preventative maintenance is significantly cheaper and simpler than responding to a full-scale cyber incident or attempting to recover data from a corrupted drive.

To mitigate these risks, experts recommend a strict transition to supported operating systems, the implementation of automated update policies that include scheduled weekly reboots, and continuous monitoring of disk and CPU health. In an environment where 15% of computers are already experiencing unexpected shutdowns or active antivirus threats, the risk of data loss and reputational damage is a daily reality.