From the article: "So, if the [police's] Windows XP computers are exposed to the public internet, then that would be a serious concern. "If they are isolated,

From the article: "So, if the [police's] Windows XP computers are exposed to the public internet, then that would be a serious concern. "If they are isolated, that would be less of a worry - but the problem is still that if something gets into a secure network, it might then spread. That is what happened in the NHS with the recent Wannacry outbreak." Only problem being that KryptosLogic tests confirmed that WannCry did not infect "properly"[1] Windows XP machines on the network (while if the malware is executed locally XP is vulnerable): https://blog.kryptoslogic.com/malware/2017/05/29/two-weeks-later.html https://blog.kryptoslogic.com/malware/2017/05/29/two-weeks-l... [1] if SP3 the infected machine would blue screen without encrypting anything and without having the possibility to spread the malware to other machines, if SP2 (improbable) the machine would not be infected.