The vulnerability exists because Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the user clicks the displayed icon of a specially crafted shortcut.

FORBES: New Windows Bug Offers Hackers An Attack Shortcut

If that is a concern, then they do need to work with their internet service provider, and perhaps with a cloud-specialty anti-DDoS provider, because those organizations have infrastructures and massive amounts of internet bandwidth which can actually absorb gigantic attacks, filter out the majority of malicious traffic, and then send the good stuff through to the end user.

FORBES: DDoS Defense: Preventing business disruption

On July 8, tech heavyweights including Microsoft, Cisco Systems and Sun Microsystems teamed up to fix a fundamental flaw in the Internet, one that could allow any Web user to be invisibly redirected to fraudulent sites designed to steal banking passwords or install malicious software on users' PCs.

FORBES: Magazine Article