Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers have run their own code inside a protected Windows VBS enclave, an isolated area meant to stay sealed off even if the rest of the computer is compromised. The enclave they broke into handles passwords for a Windows anti-phishing feature, and the work was demonstrated as a lab proof of concept.