🛑 URGENT: Microsoft rushed out out-of-band fixes for an actively exploited Office zero-day.
CVE-2026-21509 (CVSS 7.8) lets attackers bypass Office security using a malicious file that must be opened by the victim.
🔗 Details → https://t.co/a7QFT8PJPw
— The Hacker News (@TheHackersNews) January 27, 2026