HMS Queen Elizabeth 'runs on vulnerable Windows XP'

Britain's largest ever warship could be at risk of cyber attacks

Britain's newest aircraft carrier, the 3.5 billion HMS Queen Elizabeth, appears to be running the outdated Windows XP operating system, and is likely vulnerable to the same style of cyber attack that hit the NHS.

The HMS Queen Elizabeth, which is Britain's largest ever vessel, left its dockyard in Rosyth earlier today to begin its first trials at sea, marking the culmination of a nearly decade-long project to build two brand new aircraft carriers.

Advertisement - Article continues below

However, an extraordinary discovery was made during a tour of the warship, as photos published by The Telegraphtaken inside a control room onboard seemed to show computer screens displaying a Windows XP login screen.

The same OS was targeted by the WannaCry ransomware attack in May, which paralysed 300,000 computer systems across 150 countries, including some of the NHS's machines.

Officers on board the aircraft carrier said that there are teams of cyber specialists onboard to deal with any security threats against its systems. Mark Deller, commander on the Queen Elizabeth told the Guardian: "I would say compared to the NHS buying computers off the shelf, I would think we are probably better than that. If you think more Nasa and less NHS you are probably in the right place."

Advertisement - Article continues below

"When you buy a ship, you don't buy it today, you bought it 20 years ago. So what we put on the shelf and in the spec is probably what was good then," added Deller. "The reality is, we are always designed with spare capacity, so we will always have the ability to modify and upgrade. So whatever you see in the pictures, I think you will probably find we will be upgrading to whatever we want to have in due course. It might have already happened but I can't tell you."

Advertisement - Article continues below

The initial order for a new aircraft carrier came in 2007, at a time when Windows XP was still Microsoft's flagship operating system. However construction did not begin until 2009, more than two years after the release of Windows Vista, while Microsoft retired Windows XP in 2014.

Defence Secretary Sir Michael Fallon told BBC Radio 4's Today programme: "I want to reassure you about Queen Elizabeth, the security around its computer system is properly protected and we don't have any vulnerability on that particular score."

However, with the operating system out of date and vulnerable to hackers, questions remain as to whether the warship is fit to operate at a time when nation state cyber attacks are on the rise.

David Emm, principal security researcher at Kaspersky, said that a naval warship running an outdated Windows XP OS is a "scary prospect".

"There is no such thing as 100% security. Software, written by humans, will invariably contain vulnerabilities - code that can be manipulated in ways that the writers didn't realise," he said.

Main image: Bigstock

Featured Resources

Successful digital transformations are future ready - now

Research findings identify key ingredients to complete your transformation journey

Download now

Cyber security for accountants

3 ways to protect yourself and your clients online

Download now

The future of database administrators in the era of the autonomous database

Autonomous databases are here. So who needs database administrators anymore?

Download now

The IT expert’s guide to AI and content management

Your guide to the biggest opportunities for IT teams when it comes to AI and content management

Download now



How can you protect your business from crypto-ransomware?

4 Nov 2019

Businesses brace for second 'Fujiwhara effect' of 2020 as Patch Tuesday looms

9 Apr 2020
cyber security

Zoom hires ex-Facebook CSO Alex Stamos to boost platform security

8 Apr 2020

HP Support Assistant flaws leave Windows devices open to attack

6 Apr 2020

Most Popular

Mobile Phones

Microsoft patents a mobile device with a third screen

6 Apr 2020
video conferencing

Taiwan becomes first country to ban Zoom amid security concerns

8 Apr 2020
cyber security

Microsoft gobbles up domain to keep it from hackers

8 Apr 2020