According to a security study carried out by Kaspersky based on anonymous data from the Kaspersky Security Network (KSN), only 37% of users in Spain have already migrated to Windows 11. 53% continue to use Windows 10, despite the fact that its support ended in October 2025. In addition, 4.6% continue to use Windows 7, without updates since 2020.

This poses a significant risk to both individual users and businesses, as outdated systems no longer receive security patches and become gateways for cybercriminals. Research shows that this risk affects SMEs and large corporations alike, whose operational security is compromised.

In Spanish companies, 53% of corporate computers still run Windows 10. In SMEs, the figure is somewhat lower: 50.4%. In large companies, the percentage is slightly higher than the average. The study also offers details of other versions of the Microsoft operating system and its use by Spanish companies, in which 4% of SME computers still use the Windows 7 version, a percentage that is reduced to 2.5% in large corporations, which has a direct impact on their technological security.

Against this backdrop, Kaspersky experts point out that maintaining obsolete operating systems in corporate infrastructures is a significant risk for companies. This is because they are vulnerable to cyber attacks and vulnerabilities of all kinds, significantly reducing the security of work environments and seriously compromising business continuity.

Growing use of AI in cyberattacks

The current cybersecurity landscape reflects the challenges of the past and companies are questioning whether current solutions are enough. Ransomware, once a primary threat, is now showing a dangerous uptick, and business decision makers are beginning to rethink the causes of this resurgence, focusing on preventive security.

The Kaspersky Security Network (KSN) infrastructure is designed to receive and process complex data from global cyber threats, and transform it into information applicable to the company’s security solutions.

According to another previous Kaspersky study on “Cyber ​​Defense and AI: Are you ready to protect your organization?”, the company revealed that companies are increasingly concerned about the growing use of Artificial Intelligence (AI) in cyber attacks. So much so that 71% of Spanish companies consider cyberattacks driven by AI as a serious threat that affects their corporate security.

The report’s findings also highlight that 42% of Spanish respondents believe that the majority of cyber attacks on their companies included the use of AI. The study highlights that AI, which has revolutionized numerous industries, is also empowering cybercriminals, adding an additional layer of complexity to the threats businesses face.

For Oleg Gorobets, expert in corporate infrastructure protection at Kaspersky, “cybercriminals have become better organized, collaborating and developing innovative attack strategies and reducing barriers for less skilled attackers with fewer resources. Companies must prioritize the security of critical IT infrastructure with robust, multi-layered solutions that offer a unified security context,” he concludes.