NEW WINDOWS ZERO-DAY LEAKS NTLM HASHES, GETS UNOFFICIAL PATCH

Summary from the TLDR InfoSec newsletter

ARCOS Security found a vulnerability in all Windows versions that discloses NTLM hashes. It requires users to open a malicious file in Windows Explorer. ARCOS is offering a free, unofficial microcode patch until Microsoft issues an official patch.