News for hackers. Stuff that matters.

A comment on Illinois Hospital First to Shut Down After Ransomware Attack. Parent comment

Re:Illinois Hospital First to Shut Down After Ransomware Attack by lockhouse on Friday June 16, 2023 @10:46AM (#36357418)
It’s impossible to patch systems that are out of support and the security patch literally doesn’t exist. In some situations the original vendor themselves don’t even exist anymore.

Also regarding the servers and workstations, recovering from ransom ware isn’t as simple as just restoring from a backup. You’re still looking at days of effort restoring backups, reimaging workstations, and validating that everything works.

[ Parent | on HN ]
Re:Illinois Hospital First to Shut Down After Ransomware Attack by fluoridation on Friday June 16, 2023 @12:32PM (#36359451)
A vulnerable system that can't be patched shouldn't be in a position where that vulnerability can be exploited, if it's mission-critical. If it's mission-critical, it's vulnerable and can't be patched, and has to be exposed, then it's not fit for purpose and has to be replaced, or have a replacement (i.e. a backup) on stand-by.

Yes, restoring a backup requires effort. But surely less effort than losing the data altogether.

[ Parent | on HN ]