The old model of keeping bad things out of the network with a firewall is largely ineffective in modern "borderless" networks. With few exceptions, networks are not architected to defend against malware spreading from the inside, nor are cumbersome security measures taken to prevent malware from being brought in by laptops, thumb drives and other devices.

Embedded XP devices are going to be compromised in even greater numbers until corporations do away with them.