ANOTHER WONDER COMPANY

Microsoft has been producing mediocre software (remember the frigging paper clip dude in WORD?) for decades and their inattention to security has at times been breathtaking.   (I recall back in 2002 having dozens of "critical" security updates in less than a month.)

Anyway, it's no surprise that someone discovered another security flaw and has exploited it:

Flame virus prompts Microsoft to boost Windows security
By Jim Finkle

BOSTON, June 5 | Tue Jun 5, 2012 10:48am EDT

(Reuters) - Discovery of the Flame virus that mainly affected computers in the Middle East, has prompted Microsoft Corp to strengthen the security of a Windows program that helps customers secure their PCs and update software.

Mike Reavey, senior director of the Microsoft Security Response Center, said in a blog post that the world's biggest software maker plans to boost security measures on the Windows Update software that is included with the operating system that runs the majority of the world's PCs.

Microsoft disclosed over the weekend that the hackers who built Flame exploited a flaw in Windows that allowed them to trick PCs into believing it was a legitimate piece of software from Microsoft. The software was then downloaded onto computers using the Microsoft Update feature.