Microsoft warns of new Defender zero-days exploited in attacks

Microsoft has begun distributing patches for two previously unknown vulnerabilities in its Defender product, which have been leveraged by attackers to execute zero-day exploits. The vulnerabilities, which were actively being exploited, have been addressed through a recent security update. This development underscores the critical need for prompt patch management, as the window for applying these fixes is rapidly diminishing. The fact that these zero-day attacks were successful against a prominent security solution like Microsoft Defender highlights the sophistication and determination of the threat actors involved¹. Given the potential for widespread impact, it is essential for organizations to assess their exposure to these vulnerabilities without delay. The immediate application of these patches is crucial in preventing potential attacks, so practitioners must prioritize patching to prevent exploitation of these newly disclosed vulnerabilities.