New code injection method exposes all versions of Windows to cyberattack | ZDNet

I do like how it says at the end of the article how it infects your PC. You must already be infected with "something" before it can inject legitimate code into the system. Sounds like antivirus needs to catch the packet delivery methods to prevent this. Not really an exploit, as much as a person with insider knowledge of the kernel of Windows. Next step is for msft at next update change the API call locations to a different address space and call it good.
OSX beware the same is coming if it already hasn't happened.

This is one reason I am Leary of windows... Never had a problem with My Mac...

And it will continue. The theme of the last black hat convention was the IoT, last week there was a major DDOS attack using, that's right things. hyper vigilance is the order of the day, or get off the grid.

https://www.youtube.com/watch?v=ihZU5k4HERk