The first question I always ask myself when I see something like this is: “Why was it necessary to have this system connected to the web?”
If the answer is “Convenience” well, I can think of a lot of people who are going to be inconvenienced if the system goes down because of improper security.
From reading the article, I don’t see any reason for these systems to be this vulnerable.
This is not a Windows issue.
This is poorly implemented security, at best.