‘WannaCry’ ransomware: guidance updates
Summary
The NCSC published and then updated guidance on the WannaCry ransomware outbreak aimed at enterprise administrators and home users/small businesses. The guidance provides immediate mitigation steps, balancing simplicity with accuracy to avoid spreading misinformation. Updates were driven by public feedback and collaboration with other teams to ensure advice is applicable to small businesses as well as larger organisations. The NCSC also refreshed guidance on managing risks from obsolete platforms, adding measures such as network segregation and isolation for legacy or hard-to-update devices.
Key Points
- NCSC released targeted guides for enterprise administrators and home users/small businesses with immediate steps to protect systems.
- The guidance was updated early in the week after receiving feedback via social channels and contact forms.
- Updates include expanded advice applicable to small businesses and emphasise practical mitigations beyond patching, such as network segregation and isolation for legacy devices.
- NCSC deliberately avoided unverified claims (for example, phishing as a spread vector) to prevent misinformation; there was no evidence phishing enabled WannaCry spread at the time.
- The organisation stresses that user education is only one part of a broader defence strategy and should not be relied on alone.
Why should I read this?
Short answer: because this tells you what to do now — and what not to panic about. The NCSC has boiled down the technical noise into clear, practical steps for organisations and individuals. If you run IT for any kind of organisation, or look after family devices, it’s worth a quick skim so you can patch, isolate legacy kit and avoid following rumours.
Author note
Punchy: Jon L (Technical Director for Assurance) updates readers and amplifies the need to follow corrected guidance — this is important for any organisation that wants to avoid disruption and misinformation. Read the detail if you manage systems; otherwise, the key actions (patch, isolate legacy gear, follow official guidance) are already a good checklist.
Source
Source: https://www.ncsc.gov.uk/blog-post/wannacry-ransomware-guidance-updates