So on Thursday conficker shows up at University of Utah (specifically the hospital). Friday, its all over the place. The IT staff releases has this to say to the AP:
Mindy Tueller of the university's office of information technology said all faculty and students should take steps to make sure they are protected.
I have an idea: what if the IT staff stop giving quotes to the AP and install the only out of band patch from MS in the last two years, even if it is six months late. Installing the patch that closes the vulnerability would have stopped Conficker from ever being in the network in the first place....
Don't worry though if you happen to be a University of Utah patient. Patient data wasn't compromised. How do we know? The same competent IT team that can't do critical patching has told the AP so. Sure I trust them. Don't you?
The full article can be read here:
http://www.msnbc.msn.com/id/30179873/