6 ms·

According to Spain's CCN-CERT it's spreading through a remote code execution vulnerability in Windows' SMB Server, affecting pretty much all versions of Windows

by kaoD 9y ago

According to Spain's CCN-CERT it's spreading through a remote code execution vulnerability in Windows' SMB Server, affecting pretty much all versions of Windows. https://www.ccn-cert.cni.es/seguridad-al-dia/comunicados-ccn-cert/4464-ataque-masivo-de-ransomware-que-afecta-a-un-elevado-numero-de-organizaciones-espanolas.html https://www.ccn-cert.cni.es/seguridad-al-dia/comunicados-ccn... https://technet.microsoft.com/en-us/library/security/ms17-010.aspx https://technet.microsoft.com/en-us/library/security/ms17-01... IIUC the security updates have been available since March. I can understand bureaucratic entities having shitty security policies, but Telefónica? It's just... wow.

sofaofthedamned 9y ago
There are parts of the NHS who specifically do not patch.
- ajross 9y ago
  And hopefully they have well-designed and regularly audited firewalling and access control paradigms. There are good reliability reasons behind not just sucking down every patch, but it needs to be coupled with smart security work. And in any case that doesn't seem to be the issue here, per reporting. It's not NHS's reliability-critical systems that are owned, it's all their PCs.
  - sofaofthedamned 9y ago
    I'd hope so, too, but in what i've seen it generally isn't the case.
  - walshemj 9y ago
    Which they use to communicate between staff. I was at a renal clinic this afternoon and the staff there couldn't check to see if my doctor wanted them to do some bloods - so I can go back onto the transplant list. If I am unlucky this means I could miss out on a potential doner kidney due to the delay
  - mjevans 9y ago
    Don't forget to glue the USB ports; yes all of them. No, IT will need to setup a PXE server.
tankenmate 9y ago
Software monoculture roosters are coming home...
nthcolumn 9y ago
SMB vulns courtesy of the NSA? As to shitty - how long do you think it takes reasonably to test these patches on thousands of servers? What no test on a critical health system?
- kaoD 9y ago
  It's literally as easy as installing a Windows update organization-wide. What is there to test? These aren't servers. These are workstations of common workers. Windows desktops mostly used for spreadsheets and playing solitaire. I'd rather deploy a Windows update within 2 months of its release and be safe from a RCE vuln.
  - killjoywashere 9y ago
    > workstations of common workers. Windows desktops mostly used for spreadsheets and playing solitaire As a physician and researcher, this attitude from IT people is why you find physicians who don't like you.
    - dba7dba 9y ago
      Funny you should say that regarding attitude, doctor. One networking guy who used to work in a big hospital told me he hated working at the hospital because of the attitude of doctors there. Doctors with attitude of 'I'm god' really turned him off from working in the hospital setting.
      - thisisdave 9y ago
        No one in this thread claimed to be God. It's worth remembering that the whole point of Hospital IT is to facilitate the doctors' and administrators' work.
    - kaoD 9y ago
      I wasn't referring to physicians, the NHS wasn't patient zero.
  - 9y ago

by kaoD 9y ago

sofaofthedamned 9y ago

There are parts of the NHS who specifically do not patch.

ajross 9y ago
And hopefully they have well-designed and regularly audited firewalling and access control paradigms. There are good reliability reasons behind not just sucking down every patch, but it needs to be coupled with smart security work. And in any case that doesn't seem to be the issue here, per reporting. It's not NHS's reliability-critical systems that are owned, it's all their PCs.
- sofaofthedamned 9y ago
  I'd hope so, too, but in what i've seen it generally isn't the case.
- walshemj 9y ago
  Which they use to communicate between staff. I was at a renal clinic this afternoon and the staff there couldn't check to see if my doctor wanted them to do some bloods - so I can go back onto the transplant list. If I am unlucky this means I could miss out on a potential doner kidney due to the delay
- mjevans 9y ago
  Don't forget to glue the USB ports; yes all of them. No, IT will need to setup a PXE server.

tankenmate 9y ago

Software monoculture roosters are coming home...

nthcolumn 9y ago

SMB vulns courtesy of the NSA? As to shitty - how long do you think it takes reasonably to test these patches on thousands of servers? What no test on a critical health system?

kaoD 9y ago
It's literally as easy as installing a Windows update organization-wide. What is there to test? These aren't servers. These are workstations of common workers. Windows desktops mostly used for spreadsheets and playing solitaire. I'd rather deploy a Windows update within 2 months of its release and be safe from a RCE vuln.
- killjoywashere 9y ago
  > workstations of common workers. Windows desktops mostly used for spreadsheets and playing solitaire As a physician and researcher, this attitude from IT people is why you find physicians who don't like you.
  - dba7dba 9y ago
    Funny you should say that regarding attitude, doctor. One networking guy who used to work in a big hospital told me he hated working at the hospital because of the attitude of doctors there. Doctors with attitude of 'I'm god' really turned him off from working in the hospital setting.
    - thisisdave 9y ago
      No one in this thread claimed to be God. It's worth remembering that the whole point of Hospital IT is to facilitate the doctors' and administrators' work.
  - kaoD 9y ago
    I wasn't referring to physicians, the NHS wasn't patient zero.
- 9y ago