In response to the reports, Microsoft said that it “does not discuss the details of reported vulnerabilities before an update is available”. military and other high-value targets, under NDA. Krebs’ sources allege that Microsoft has rolled this out to braches of the U.S. Apparently DoD & a few others got an advance patch Sources say Microsoft on Tuesday will fix an extraordinarily scary flaw in all Windows versions, in a core cryptographic component that could be abused to spoof the source of digitally signed software.