NHS cyberattack: government and Microsoft criticised as threat continues

Who is to blame for the vulnerability of the NHS to this attack?