The exploit supposedly allows hackers to gain system privileges on a Windows system once they have code execution capabilities
Researchers found remote code execution flaws in support tools from Acer, Asus, Lenovo, Dell, and HP
The data was stolen in 2013 and the passwords are hashed and salted
The malware used to steal $81 million from Bangladesh Bank has links to the 2014 attack on Sony Pictures
The incidents are part of a larger trend of cybercriminals targeting financial institutions directly instead of customers
Automatic proxy configuration requests frequently leak on the public Internet from corporate computers
New version fixes known flaws and adopts new exploit kit-based distribution model
The vulnerability has been known for almost a year, but many users haven't applied the patches
The flaws can be exploited with specifically crafted HTTP requests to cause denial-of-service conditions
The data includes hashed passwords for 117 million accounts and likely dates back to 2012
