US cybersecurity agency issues super-rare emergency directive to patch Windows Server flaw ASAP

Uncle Sam's Cybersecurity and Infrastructure Security Agency (CISA) has taken the unusual step of issuing an emergency directive that gives US government agencies a four-day deadline to roll out a Windows Server patch. The directive, issued on September 18, demanded that executive agencies to take “immediate and emergency …

[amanfromMars 1]

The Emperor has Lost All of his Clothes ....

If one equates and is able to realise Windows Server is a euphemism for USAdministration, the critical severity of the vulnerability to relentlessly exploit and ruthlessly explore is understandable.

Quite whether, whenever such is the case, there is any possible patch available to prevent further unauthorised irregular development by forces and/or sources ideally unknown, is highly questionable. ...... however, as hope springs eternal, it surely guarantees much futile future activity in a field in which there are no victories to celebrate nor battles to win.

[Duncan Macdonald]

How many ?

Despite the directive how many US government servers will still be unpatched at the end of the year ?

Icon for the US government ================>

[sanmigueelbeer]

Re: How many ?

how many US government servers will still be unpatched at the end of the year

US Government agencies? Shirley not. They know what they are doing and do not need to be told what to do.

El Reg, can I request for an "I told you so" icon, please?

[Anonymous Coward]

Do not patch ..

Command issued by the Trump White House - applies specifically to voting systems..

[DS999]

Re: Do not patch ..

If is anyone is using an internet connected Windows Server that's part of a domain as a voting machine, we're in more trouble than I thought.

[Anonymous Coward]

Maybe

we can call this the Westworld exploit, after the movie. Slip in replacement admins, all around the world.

[John Smith 19]

CASE NIGHTMARE GREEN of Windows security?

Probably not. *

*With Windows there is always something worse to find, although in this case it's going to be a pretty hard search.

[amanfromMars 1]

CASE NIGHTMARE GREEN of Windows security? An Advanced Persistent Threat/Treat Vector with Sectors.

The new norm, John Smith 19, for Windows with SMARTR AI Views is Fiendish in the Enemy of Friends UnFriendly to Enemies. "Tis a wholly New Novel AI and NEUKlearer HyperRadioProACTive IT World out there today, with all manner of tried and trusted knights and windmills to joust and tilt at/temper and engage.

Rise like Lions after slumber

In unvanquishable number.

Shake your chains to earth like dew

Which in sleep had fallen on you—

Ye are many—they are few.

..... which is a verse from Shelley’s, The Masque of Anarchy, be extremely APT here, revealing as it does the nature and being of the opposition and resistance to be fully expected in the presence of any future discontent. The beauty and the sorrow of it is, so many will find it too impossible to easily believe ...... although the upside to that downside is, the invisible stealth delivered and enjoyed in intangible operations is almighty astounding and simply outstanding ....... leaving one to ponder and wonder on the practically invincible and singularly indivisible.

[Claverhouse]

I Dunno

If that government didn't act so fast to mandate patching, they'd be excoriated for indolence and enabling ransomware --- probably by The Reg --- yet when they do, they and the agencies are sneered at. Quite easy for admins to cautiously hold off on a Windows Update, lest worse befall.

[IGotOut]

Re: I Dunno

Please point to the part of the article where the Reg "sneered" at them?

The snark appears to be aimed at the agencies having to be told to patch.

[fidodogbreath]

My wife works for the US Federal Government. Their IT is chronically underfunded, at least in terms of delivering basic-function items such as hardware and software updates. As a result, they're typically understaffed and pretty far behind the update curve. Witness the OPM hack (among many others).

[JBowler]

Please, I know you aspire to be a newspaper but, please, stop scaring us.

>That the agency feels the need to issue one for this flaw is notable given that simply applying Microsoft's August patches would have fixed the problem.

Indeed, I did.

[VE3ID]

Hmmm, so the August patches would have fixed the problem, which the security people are just noticing and issuing emergency advice? Sounds very much like the hurry up and wait brigade are no longer just in the military!