The Windows security updates from January herald the phase-out of insecure RC4 encryption. A vulnerability requires action.