Microsoft patched a zero-day vulnerability actively used in a campaign by a hacking group known as Zirconium.
Source: Threadpost