Downgrade attacks: researchers took over the Windows Update process to make the term “fully patched” meaningless on any Windows machine.