Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.
In addition to rolling out patches to address two zero-days affecting SQL Server and .NET, Microsoft introduced Common Log File System hardening with signature verification.