Crims found and exploited these two Microsoft bugs before Redmond fixed 'em

Microsoft's February Patch Tuesday fixed 73 vulnerabilities, including two that are being actively exploited: CVE-2024-21412 (an Internet shortcut bypass exploited by the financially motivated Water Hydra group to deliver the DarkMe remote-access trojan to traders) and CVE-2024-21351 (a SmartScreen bypass). The bulletin also lists several critical Microsoft flaws (Exchange, Office, Business Central, Hyper-V, etc.) and summarizes February security updates from Adobe, SAP, Intel, AMD, Cisco, and Google/Android, urging prompt patching.