Re:Illinois Hospital First to Shut Down After Ransomware Attack
by lockhouse on Friday June 16, 2023 @10:46AM
(#36357418)
It’s impossible to patch systems that are out of support and the security patch literally doesn’t exist. In some situations the original vendor themselves don’t even exist anymore.
Also regarding the servers and workstations, recovering from ransom ware isn’t as simple as just restoring from a backup. You’re still looking at days of effort restoring backups, reimaging workstations, and validating that everything works.
Re:Illinois Hospital First to Shut Down After Ransomware Attack
by fluoridation on Friday June 16, 2023 @12:32PM
(#36359451)
A vulnerable system that can't be patched shouldn't be in a position where that vulnerability can be exploited, if it's mission-critical. If it's mission-critical, it's vulnerable and can't be patched, and has to be exposed, then it's not fit for purpose and has to be replaced, or have a replacement (i.e. a backup) on stand-by.
Yes, restoring a backup requires effort. But surely less effort than losing the data altogether.
Second, a ransomware attack isn't going to attack stuff like medical equipment, which wouldn't hold any important files anyway. It's going to attack workstations and servers likely running some version of Windows. If your IT staff can't keep that stuff backed up then you don't have IT staff.