Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs

Microsoft's February Patch Tuesday addresses 73 CVEs including two zero-days being actively exploited: CVE-2024-21412 (Internet Shortcut Files bypass) which Water Hydra is using to target financial traders and drop the DarkMe RAT, and CVE-2024-21351 (Defender SmartScreen bypass) that can allow code injection; the bulletin also highlights other critical flaws in Exchange (CVE-2024-21410) and Outlook (CVE-2024-21413) and provides remediation guidance.