Microsoft fixes two Windows zero-days exploited in malware attacks

Microsoft's April 2024 Patch Tuesday fixed two actively exploited zero-days: CVE-2024-26234, a malicious proxy driver/backdoor signed with a legitimate Microsoft Hardware Publisher Certificate, and CVE-2024-29988, a SmartScreen/Mark-of-the-Web bypass used to evade detections and deliver malware (including DarkMe RAT) in targeted campaigns attributed to financially motivated actors such as Water Hydra.