Russian hackers used a vulnerability in the Microsoft Windows operating system to spy on the computers of NATO, Ukraine and other political rivals.

According to a report released by cybersecurity firm iSIGHT Partners, a “zero-day” exploit is present in “all supported versions of Microsoft Windows” from Windows Vista onward. The bug allows hackers to remotely execute programs though infected email attachments.