The Department of Homeland Security, the agency charged with protecting the federal government from cyber attacks, is itself vulnerable to such threats because its own outdated computers lack even the basic protections needed to fend off hackers, a new report shows.

The 50-page report, released Monday by the department’s Inspector General, found numerous serious flaws in the department’s computer security program, starting with the fact that it’s run on a nearly obsolete, decade-old operating system.