WannaCry turns delayed Windows patches into a global emergency
WannaCry spreads automatically among vulnerable Windows computers, encrypting files and demonstrating how one unpatched machine can expose an entire connected organization.
A ransomware outbreak called WannaCry is disrupting computers around the world today. After infecting a Windows machine, the malware encrypts files, demands payment and searches the network for other vulnerable systems, allowing the attack to spread like a worm.
Microsoft says the exploit targets a flaw addressed by security bulletin MS17-010 in March. Windows 10 is not targeted by the exploit, but unpatched Windows 7 and Windows Server systems remain exposed. The company is urging customers to install the update and keep antimalware protection enabled.
The incident turns routine maintenance into an operational crisis for hospitals, businesses and public services. An organization can have careful employees and still be compromised through a machine missing a critical fix. Administrators now face urgent recovery work, while leaders have a harder lesson: unsupported software, delayed patching and flat internal networks create risks that eventually reach far beyond the IT department.
Source: Microsoft Security Blog ↗