Hacker News Reader

Until a fix is released, this can be mitigated by blocking outbound TCP connections on ports 139 and 445.

Individual users can do this using by setting up suitable outbound rules in the Windows Firewall with Advanced Security snap-in (wf.msc).

Or by using a browser that doesn't silently and promiscuously attempt to connect to remote network shares. Like, any other browser. Good grief.

Or both. Defense in depth.