Re: Another solution
>What excuse is there for leaving eternalBlue open for this long?
Perhaps you are coming at this from the wrong direction. The NCC Group reports, unfortunately, don't comment on whether the client's network did or did not have fully up-to-date patched systems or not. I suspect from their articles the network did contain systems that were fully patched and running the latest AV software designed to detect NotPetya...