@cee-dee wrote:

Microsoft actually issued a fix for the defect in March that would have stopped the attack. It's been admitted that many people didn't apply it.


They didn't issue a fix for XP - nor for Windows 8 or Server 2003 - they have however released a fix for these operating systems today.

 

https://www.ft.com/content/348d4f7a-3808-11e7-821a-6027b8a20f23