I remember the days of dumb terminals, thin clients, physically separated networks and server farms buried in deep dark dungeons. Nowadays, with everyone having computers there are so many more ways in. Progress?
I have been reading blogs about WannaCry by MalwareTech, the guy who discovered the KillSwitch, and Troy hunt an independent security guru. They both give out similar info about patching, backups, closing ports, closing SMBv1, restricting network access....... and the old, old favourite "Don't open suspicious email or attachments". How many more times do people need to be told? The moral is that no amount of keeping software and hardware up to date will be of any benefit if the users act like idiots.