Microsoft's patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack

Microsoft's patch for a 0-day vulnerability exploited by Russian spies proved ineffective, and attackers are now exploiting another zero-click Windows flaw that risks exposing sensitive system data. The US Cybersecurity and Infrastructure Security Agency (CISA) has joined Microsoft in issuing warnings about the ongoing threat.