Whitehats' ability to sidestep EMET strongly suggest criminal hackers can, too.
New attack completely bypasses Microsoft zero-day protection app
New attack completely bypasses Microsoft zero-day protection app