We reported in September that Windows Defender has added the ability to download files via the command line using the app, e.g. MpCmdRun.exe -DownloadFile -url [url] -path [path_to_save_file] … which could be used to download an abitrary binary from the internet. While not an exploit in itself, the feature allows a script which can launch the […]

The rest of the story...
Microsoft News