Microsoft’s Windows error report feature mostly transmits crash log data unencrypted and in the clear, leaving organizations that use the function vulnerable to targeted attacks. The sensitive information in these reports can help bad guys and even the National Security Agency profile potential targeted machines and networks. The attacks have been suspended and the command-and-control infrastructures disrupted. The full Websense report is available for download for free download in the free source code available next week at the RSA Conference in San Francisco.”]