Microsoft isn't fixing 8-year-old shortcut exploit abused for spying