Microsoft patches 58 vulnerabilities, including six actively exploited zero-days across Windows, Office, and RDP, as CISA sets a March 3 deadline.
A Microsoft Outlook add-in was abandoned and taken over by hackers, who used it to collect email accounts and banking data.