Microsoft releases emergency WannaCrypt protection for out-of-support products Windows XP, Windows 8, & Windows Server 2003

[Qub3d]

This is, I think, significant enough of a story to be separate from the main WCrypt thread.

 

In a surprised move, Microsoft has released a patch to fix the security issue that WannaCrypt exploits to spread itself on Windows version that are no longer supported. It isn't forcing people to update their OS to the latest version of Windows to get it. The company has released a patch for Windows Server 2003, Windows 8.0 and even Windows XP to stop this ransomware and fix the the security issue.

 

Source:

www.bleepingcomputer.com/news/security/microsoft-releases-patch-for-older-windows-versions-to-protect-against-wana-decrypt0r/

blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

 

From the first source:

Quote

The operating systems are Windows XP, Windows 8, and Windows Server 2003. These are old operating systems that Microsoft stopped supporting years before and did not receive a fix for the SMBv1 exploit that the Wana Decrypt0r ransomware used yesterday as a self-spreading mechanism.

 

From Microsoft's statement:
 

Quote

Given the potential impact to customers and their businesses, we made the decision to make the Security Update for platforms in custom support only, Windows XP, Windows 8, and Windows Server 2003, broadly available for download (see links below).

This decision was made based on an assessment of this situation, with the principle of protecting our customer ecosystem overall, firmly in mind.

 

It's nice to see Microsoft stepping up to offer support for something not supported, though I imagine several big corporations have paid a pretty penny behind the scenes...