Windows XP was unprotected, The Verge reports, with some organizations running the system despite the risks.