Sophos's free tool enabling computer users to check if machines were a security risk has revealed some startling results. Sophos's John Shaw, director of endpoint security, discusses the state of security in the market, including that half the computers scanned were missing security patches or running out-of-date protection software.