Wanna[Cry|Scream|Belch] Ransomware

I breathed a sigh of relief last Friday when I learned that Microsoft had patched a vulnerability in March that was recently exploited by the WannaCrypt0r ransomware.  I opt to have Windows OS updates installed automatically on my workstation so I was protected before the ransomware poked through the crust from the bowels of its maker.

So what is the best practice for managing Windows patches on Oracle EPM (Hyperion) servers?

The IT Leader's Guide to Multicloud Readiness

This guide provides practical key insights and important factors to consider to make informed decisions in your multicloud journey.

Download the Guide

“Manage patches, don’t inflict them.”

This is the same philosophy I have with change control. Manage in lieu of inflicting. Be proactive. So here are a couple pointers to help you manage Windows patches on your EPM servers:

1. Get informed by subscribing to the Microsoft Technical Security Notification Services. Create a Microsoft Live account if don’t already have one then update your subscription preferences:  https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizard.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&lcid=1033
2. Stay up to date on Oracle security updates by subscribing to Oracle Security Alerts. Log in to Oracle Technical Network then select the Account link at the top of the page.  Select the Subscriptions page of your Profile then subscribe to Security Alerts in the “Oracle privacy policy and security notifications” section.

According to GI Joe, “Knowing is only half the battle.” Getting the security alerts is step one. The next step is to take action. I won’t insult your intelligence by describing how you should read the security notices and patch release notes, but, you must read them. Only then can you make an informed decision as to whether you need to apply patches or other updates based on your organization’s tolerance for risk.

I also recommend you take action for your home computers. The Guardian published a nice article¹ last week about how to defend against the ransomware here:  http://theguardian.com/technology/2017/may/15/windows-xp-patch-wannacry-ransomware-wecry-wanacrypt0r. I couldn’t write it better.

1. Hern, Alex. “How to protect your computer against the ransomware attack”, theguardian, 15 May 2017, theguardian.com/technology/2017/may/15/windows-xp-patch-wannacry-ransomware-wecry-wanacrypt0r. Accessed 16 May 2017.