Less than two months after demonstrating a "Face Swap" vulnerability, researchers have revealed an even bigger Windows vulnerability. German security firm ERNW has revealed a more advanced attack against Windows Hello that allows attackers to inject their own face templates into victims' accounts.