Security researchers say Microsoft has been cautious with this Kerberos issue, promising a fix in a couple of weeks, but point out that the issue is likely buried in complex OS code.