Update – Microsoft to Include Support for WannaCrypt Attacks - Windows XP & 2003
There is a great relief for the many companies which still use legacy systems that are no longer supported by the manufacturer, as the case with Windows XP and Windows Server 2003 - Microsoft is including these…
There is a great relief for the many companies which still use legacy systems that are no longer supported by the manufacturer, as the case with Windows XP and Windows Server 2003 - Microsoft is including these operating systems in the updates to patch for the existing vulnerabilities exposed in this attack. For those customers who still have legacy systems, this is vital to protect their overall customer ecosystem.
Download English language security updates for:
- Windows Server 2003 SP2 x64
- Windows Server 2003 SP2 x86
- Windows XP SP2 x64
- Windows XP SP3 x86
- Windows XP Embedded SP3 x86
- Windows 8 x86
- Windows 8 x64
To download localized versions for the security update for Windows XP, Windows 8 or Windows Server: http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012598
Updated November 2026: the original post is kept above; the sections below add context for readers today.
What WannaCry showed
WannaCry spread on May 12, 2017 through the SMBv1 flaw fixed in Microsoft update MS17-010 two months earlier. It encrypted more than 200,000 computers in about 150 countries, hitting hospitals, factories and transport. Microsoft took the rare step of releasing patches for Windows XP and Server 2003, which were already out of support.
The lessons: patch quickly, disable old protocols such as SMBv1, keep offline or immutable backups, and plan to replace systems that no longer get updates. See backup and disaster recovery.
