I called it an "attack" instead of "attempt" or "probe" because the request looked like it would be successful on an unpatched system, and it contained an actual malware payload. The attack is blocked by platform mitigations, and I did not confirm whether it would otherwise work.
Quote Tweet
Replying to @greg_1_anderson
Would it be right to say "attempted exploit?" instead of "attack?"
Also, I'm headed to sprint day shortly. If you're still around maybe we can review and write up a blog post?