Chris Morales, head of security analytics at Vectra, says that while the move may have been prompted by genuine concern that others could exploit the vulnerability, “it just could be the NSA already has enough other methods for compromising a Windows system and doesn’t need it”.