Microsoft reveals flaw Duqu exploits, issues awkward workaround