MICROSOFT RATED THIS BUG AS LOW EXPLOITABILITY. MISCREANTS WEAPONIZED IT IN JUST 8 DAYS

Summary from the TLDR InfoSec newsletter

A Microsoft Windows NTLM hash-leaking vulnerability (CVE-2025-24054) was weaponized just eight days after Patch Tuesday. Initially exploiting victims through Dropbox-hosted ZIP files, the attackers, which targeted Poland and Romania, evolved to sending standalone malicious files directly.