"IT Manager" -- orly?

Sack the clueless cunt. As others have said, the fucking exploit was announced waaaaay before December and it's just piss-poor admin policy if the fucking things are set on the default "check for updates smack-bang in the middle of the working day" policy and have them internet-capable and not on a segregated LAN with its own update server...

Useless...