Those who do not upgrade from Windows XP when Microsoft ends support in April will be at risk of attack as hackers reverse engineer security updates for newer versions of the OS to look for exploits that may remain unpatched in unsupported versions.