Losses should not be covered if the insurer can show they were the fault of the operating system not being patched.