[remx]

This is what I want to know[0] too.

To mitigate, you can disable SMB1.0 with the following command. Make sure to run as administrator:

    dism /online /norestart /disable-feature /featurename:SMB1Protocol

[0]: https://news.ycombinator.com/item?id=14335845

[syshum]

To mitigate, Install Security Patches in a Timely manner.

Also note that only works on windows 7 and later, dism is not a tool for XP or Windows 2003 which seem to be the largest numbers hit by this since there is/was no patches for them

[technion]

Careful, most old scanners out there only talk SMB1.

I'm all for recommending defence in depth, but please study changes like this before doing them.