Re: If you cannot patch it quarantine it
London's road, traffic control centres, CCTV and road tunnels are entirely running on unpatched Windoze. Their network is almost completely open to the wider Internet - they have "Firewalls", but they're frequently circumvented by the need to make access easier (and to make recalcitrant stuff actually work). There's no real security at all. The situation is similar on the Underground as well. Patching or OS upgrades aren't possible because doing either breaks the functionality of their poorly piecemeal-written crudware. It's only a matter of time before chunks of London grind to a halt because of a malware attack of some kind.