Microsoft: hackers are exploiting zero-day bugs in Windows and Office, update now
With one click on a link, attackers can bypass SmartScreen protection. Google says the bug is under widespread active exploitation.
On February 11, Microsoft said hackers are exploiting critical zero-day bugs in Windows and Office, and released fixes.
The bugs
- CVE-2026-21510: a Windows Shell flaw affecting all supported versions of Windows. One click on a link bypasses SmartScreen protection
- CVE-2026-21513: a flaw in MSHTML that lets attackers bypass Windows security features and plant malware
How serious?
- According to Google, the Windows Shell bug is under "widespread, active exploitation"
- According to Brian Krebs, Microsoft also patched three other exploited zero-days
What to do
- Run Windows Update as soon as possible
- Don't click links from unknown sources
Founder and editor-in-chief of Kurd Developers. Phone and tech news on YouTube, Instagram and TikTok.
More stories
One text can break your phone: Android's 'SMS of Death' explained
A flaw in Android 12 and later lets a specially crafted SMS drop calls and even make a phone unusable. The fix is in October's security patch.
GTA VI lands November 19: prices, editions and what to know
Rockstar has locked the date: Thursday, November 19 on PS5 and Xbox Series X|S. Standard costs $79.99 and Ultimate $99.99.
Apple's first touchscreen MacBook Pro brings OLED and Dynamic Island
The new PROLED XDR display responds to touch, the notch is gone and Dynamic Island takes its place. Prices start at $2,899.
The $1,999 iPhone Duo Has a Black-Bar Problem, and Fixing It Is Harder Than It Looks
Apple's first foldable is a hardware flex. But unfold it and many of your apps shrink into a phone-shaped window floating in black. Here's why the app world wasn't ready, and why developers can't just hit "stretch".