Chris Morales, head of security analytics at Vectra says, “NSA may have reported this flaw to MS because there was a concern that others would find this vulnerability themselves.