MICROSOFT SAYS HACKERS ARE EXPLOITING CRITICAL ZERO-DAY BUGS TO TARGET WINDOWS AND OFFICE USERS

Summary from the TLDR InfoSec newsletter

Microsoft has shipped emergency fixes for several actively exploited Windows and Office zero-days that enable one-click remote code execution and SmartScreen bypasses across all supported Windows versions. Attackers can silently run high-privilege malware, enabling ransomware and espionage campaigns. Admins and end users are urged to patch immediately and treat malicious links and Office files as high risk.