BadTunnel: a vulnerability all Windows users need to patch

The vulnerability could give attackers a way to set up man-in-the-middle attacks against victims by getting them to click on a link, open a Microsoft Office document or plug in a USB stick.