Microsoft says hackers are exploiting critical zero-day bugs to target Windows and Office users

Microsoft has identified critical zero-day security vulnerabilities in its Windows and Office software that allow hackers to gain complete control of victims' computers by simply clicking malicious links or opening files, prompting the tech giant to urge users to patch their systems immediately. The security flaws, which are actively being exploited by malicious actors, represent significant risks as they enable remote code execution without requiring additional user privileges beyond the initial interaction. These vulnerabilities affect multiple versions of Windows and Office applications, making them particularly dangerous given the widespread adoption of these products in both personal and enterprise environments. Microsoft has not specified when the vulnerabilities were first discovered or how many systems have been compromised thus far, but the company emphasized the urgency of applying available security updates to mitigate potential attacks.