No fix in sight for mile-wide loophole plaguing a key Windows defense for years
arstechnica.com
Lazarus is latest group to pull off "bring your own vulnerable device" attack.

Windows once again fails at security despite convoluted attempt