Researchers say a 18-year-old programming error by Microsoft is creating a kernel bug that can be abused by an attacker.

The bug was simple enough to be fixed almost instantly by the OpenSSL team once they were alerted, but security is still at risk until websites update their servers with the new versions — a ...