Convince Me to Patch: A Haiku Series
I asked a team of security professionals to distill lessons about cyber hygiene into 17-syllable haikus. They delivered. Here’s just a sample…
As an avid reader and writer, I admire those who can synthesize complicated ideas in a few words.
In this vein, I invited the seasoned security professionals I work with to compose haikus on the theme of cybersecurity hygiene, and submit their best for a small prize. I expected 5–8 people to participate and instead, received over 75 poems within a few days. (This team is either hyper-creatively inclined, or I underestimated their competitiveness.)
One theme stood out: Patching is a pain, but ransomware is worse.
WannaCry outbreak
Emergency patching now!
We have not patched since
Ransomware is a type of malware that infects and encrypts files and sometimes, entire disks, to prevent access until a ransom (typically in cryptocurrencies) is paid. Even then, there is no guarantee cybercriminals will follow through and return access to lost files.
Ransomware outbreak?
If you’re backed up it’s all good
Scurryfunge, too late.Domain Controllers.
Then we found the ransomware.
Now they’re paperweights.
In 2017, ransomware including WannaCry occupied headlines with attacks on critical services like hospitals, transportation, and traffic systems. What happened to infected machines that have not been patched since then? Is ransomware falling out of favor? What’s the deal with cryptomining?
If you’re asking the same questions, the upcoming Microsoft’s Security Intelligence Report, version 24 will unveil new research on 2018 threat trends. Explore the latest data on ransomware, cryptocurrency mining, phishing, and more. Stay tuned!
Go click on the link!
Now I install the virus
Fifty bitcoin, please
In the meantime, some advice from the pros:
Patch or not to patch
Forever is the question
The answer is patchBank or shop online?
HTTPS will help
As will MFA
