Resolve false alarms about WantoCry on Samba by hardening smb.conf with host restrictions and disabling legacy SMB protocols to prevent lateral movement.