Microsoft has released a security patch to fix a flaw in its Windows Malware Protection Engine that, if left untreated, can exploit a memory corruption error in the malware scanning tool and hack your system. The bug in Malware Protection Engine was discovered by the UK’s National Cyber Security Centre. The vulnerability (CVE-2017-11937) can affect systems running Windows 7, 8.1, 10 and Server 2016. A similar flaw was found by Tavis Ormandy, security researcher for Google ’s Project Zero, in June this year. “According to Microsoft, the vulnerability can be triggered when the Malware Protection Engine scans a downloaded file to check for threats,” The registrar reported. In many systems, this happens automatically for all new files. Microsoft recommends all uses to immediately install the new security patch. “There are many ways that an attacker could place a specially crafted file in a location that is scanned by the Microsoft Malware Protection Engine. For exam...