Security researcher says Microsoft has delayed releasing a fix for the SMB flaw for three months. The vulnerability affects Microsoft SMB version 3, the most recent version of the protocol. An attacker can exploit the vulnerability by tricking a Windows system to connect to a malicious SMB server. There are a number of techniques to force such SMB connections and some require little or no user interaction. No confirmed reports of successful arbitrary code execution through this vulnerability have been reported. Microsoft did not immediately respond to a comment.”]

