What happened.Microsoft resolved an actively exploited security feature bypass vulnerability in the Windows Shell as part of its monthly cumulative quality updates.

Why it matters.Attackers rely on MotW stripping to trick employees into executing malicious email attachments without seeing standard operating system warnings. IT leaders must push the cumulative security quality package across all workstations and verify that endpoint detection rules flag unsigned executable launches.