Wanacrypt - patch your systems now if you haven't yet

[UtwigMU]

As I read somewhere: You know the shit has hit the fan when Microsoft issued a patch for Windows XP in 2017.

Large organizations such as national telecoms, Renault, Sberbank are affected:

https://en.wikipedia.org/wiki/WannaCry_ransomware_attack

German Railroad is using blackboard and chalk for train departures.

Renault car factory in Slovenia also halted production.

I backed up and updated all servers over weekend. Today I spent most of the day patching workstations. Also patched some industrial measuring equipment still running Windows XP with the out of band issued XP patch. So far all the places I run are unaffected.

[Elie]

Where can I get the patch? Is it pushed by Microsoft?
I have one PC at home running XP, it's offline and I will keep it that way, but it's nice to know that there is a patch for it.

[Jammrock]

The updates should install with Windows Update. We've been dealing with this issue all week.

This blog posts covers what you need to know.

https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

[dZeus]

The updates should install with Windows Update. We've been dealing with this issue all week.

This blog posts covers what you need to know.

https://blogs.technet.microsoft.com/...crypt-attacks/

Hopefully the malware attack will (re?)start a discussion on what type of vulnerabilities should be patched ASAP and which ones are 'safe to stockpile' by state agencies using it to perform espionage...

[Jammrock]

There is a US bill in committee that would require national security agencies to reveal exploits to the appropriate company. While the agencies may drag their feet some before disclosing the vulnerabilities (assuming the bill passes into law), it would allow for safer overall computing in the future.

There is still another problem though, people disabling patching. The patch that fixes WannaCrypt was released in March. The outbreak would not have been as bad if patching was enabled and run on the recommended scheduled. Except places like China and Russia where pirated copies of Windows are apparently pretty common, and patching is blocked.

https://www.engadget.com/2017/05/15/pirated-windows-china-russia-wannacry/

[dZeus]

There is a US bill in committee that would require national security agencies to reveal exploits to the appropriate company. While the agencies may drag their feet some before disclosing the vulnerabilities (assuming the bill passes into law), it would allow for safer overall computing in the future.

There is still another problem though, people disabling patching. The patch that fixes WannaCrypt was released in March. The outbreak would not have been as bad if patching was enabled and run on the recommended scheduled. Except places like China and Russia where pirated copies of Windows are apparently pretty common, and patching is blocked.

https://www.engadget.com/2017/05/15/...ssia-wannacry/

also some consumers block patching of their Win 7 & 8.1 installs to prevent the Windows 10-esque telemetry to be enabled against their wishes

[Jammrock]

There are a lot of ways to block telemetry without blocking patching. People have built a number of automated tools to make it easy.

http://winaero.com/blog/stop-windows-10-spying-on-you-using-just-windows-firewall/

https://gist.github.com/alirobe/7f3b34ad89a159e6daa1

[DentyCracker]

What is an XP. LOL Man I haven't posted here in a bit Need to update my sig

[UtwigMU]

Welcome back Denty, long time no see!

[VJ]

Welcome back!

Need to update my sig

Does that mean you'll be sticking around more?