> If a worm is based on the disclosure and hits two months after public disclosure of a hole, then it doesn't really matter if that disclosure happens in 2014,

> If a worm is based on the disclosure and hits two months after public disclosure of a hole, then it doesn't really matter if that disclosure happens in 2014, 2017, or 2020. Heck, in this case specifically it could be argued that the delay has been beneficial because we are now better equipped in general to manage such attacks. First off I never said disclose publicly, I said disclose to software vendors. Further you can not know if it disclosed soon after discovery, which I personally believe was discovered long before 2014, probably has been in the NSA inventory for a decade or more, it would have had a worse impact, or that a ransomware worm would have been developed 2 months later Ransomware is reality new in this kind of attack, most likly if this would have been released in say 2007 it would have been a Spam Botnet or a DDOS Botnet if anything, not Ransomeware. >>>If you can't deal with MS patch quality then don't frikkin use their software. Ohh that is the dream. I use bullshit like this to advocate dropping MS like a bad habit, every year I get more traction in my crusade to rid my company of MS