Tutorials for exploiting a Windows MSHTML zero-day vulnerability tracked as CVE-2021-40444, has been shared on multiple hacking forums allowing novice hackers to implement the exploit into their own attacks. The flaw allows attackers to create malicious documents with embedded code that execute commands by remote when accessed by their victims. These vulnerabilities have already been exploited in-the-wild by well-known hacking groups like EXPMON and Mandiant. Although a patch to fix the vulnerability does not exist, Microsoft disclosed mitigation techniques and steps to stop CVE-2021-40444 from being exploited by blocking Word/RTF document previews and ActiveX controls in Windows Explorer. Unfortunately, researchers have already modified the exploit to bypass Microsoft’s mitigation by not using ActiveX, and thus users are still at risk until Microsoft discloses the work around and provides a security update. Microsoft advises users to treat all Word and RTF attachments with suspicion, and the source of the documents must be manually verified before accessing them. CTAPT will follow this matter closely and provide an update to our readers when a security patch is released.