Windows XP has been retired from power plants and other critical infrastructure networks. The ICS/SCADA world has a culture of no-patch mentality, security experts say. Safety and uninterrupted operations trump cyber security in those environments. Windows XP is more vulnerable to the HMI (human-machine interface) and other applications atop XP in these process environments. Some operators prefer to add more monitoring or other defenses to watch for malware and attacks than to patch software, security expert says. The more security-aware ones are finding ways to update software where they can.”]
Source: https://www.darkreading.com/application-security/windows-xp-alive-well-in-ics-scada-networks