Editing National Security Agency (section)

=== Responsibility for global ransomware attack ===
An exploit dubbed [[EternalBlue]], created by the NSA, was used in the [[WannaCry ransomware attack]] in May 2017.<ref>{{Cite news|url=https://www.washingtonpost.com/business/technology/nsa-officials-worried-about-the-day-its-potent-hacking-tool-would-get-loose-then-it-did/2017/05/16/50670b16-3978-11e7-a058-ddbb23c75d82_story.html|title=NSA officials worried about the day its potent hacking tool would get loose. Then it did.|last1=Nakashima|first1=Ellen|date=2017-05-16|newspaper=Washington Post|access-date=2017-12-19|last2=Timberg|first2=Craig|language=en-US|issn=0190-8286|archive-date=2022-09-01|archive-url=https://web.archive.org/web/20220901234448/https://www.washingtonpost.com/business/technology/nsa-officials-worried-about-the-day-its-potent-hacking-tool-would-get-loose-then-it-did/2017/05/16/50670b16-3978-11e7-a058-ddbb23c75d82_story.html|url-status=live}}</ref> The exploit had been leaked online by a hacking group, The Shadow Brokers, nearly a month before the attack. Several experts have pointed the finger at the NSA's non-disclosure of the underlying vulnerability, and their loss of control over the EternalBlue attack tool that exploited it. Edward Snowden said that if the NSA had "[[Responsible disclosure|privately disclosed]] the flaw used to attack hospitals when they found it, not when they lost it, [the attack] might not have happened".<ref>{{cite web|url=https://www.theguardian.com/technology/2017/may/12/global-cyber-attack-ransomware-nsa-uk-nhs|title=Massive ransomware cyber-attack hits 74 countries around the world|first1=Julia Carrie|last1=Wong|author1-link=Julia Carrie Wong|first2=Olivia|last2=Solon|date=12 May 2017|access-date=12 May 2017|work=The Guardian|archive-date=21 May 2017|archive-url=https://web.archive.org/web/20170521030555/https://www.theguardian.com/technology/2017/may/12/global-cyber-attack-ransomware-nsa-uk-nhs|url-status=live}}</ref> Wikipedia co-founder, [[Jimmy Wales]], stated that he joined "with Microsoft and the other leaders of the industry in saying this is a huge screw-up by the government ... the moment the NSA found it, they should have notified Microsoft so they could quietly issue a [[Patch (computing)|patch]] and really chivvy people along, long before it became a huge problem."<ref>{{cite news|last1=Kharpal|first1=Arjun|title=Cyberattack that hit 200,000 users was 'huge screw-up' by government, Wikipedia's Jimmy Wales says|url=https://www.cnbc.com/2017/05/19/wannacry-cyberattack-nsa-wikipedia-jimmy-wales.html|access-date=2 June 2017|publisher=CNBC|date=19 May 2017|archive-date=24 May 2017|archive-url=https://web.archive.org/web/20170524225959/http://www.cnbc.com/2017/05/19/wannacry-cyberattack-nsa-wikipedia-jimmy-wales.html|url-status=live}}</ref>