Windows zero-day exploit used in targeted attacks by FruityArmor APTA few days ago, Microsoft published the "critical" MS16-120 security bulletin with fixes for vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. One of the vulnerabilities - CVE-2016-3393 - was reported to Microsoft by Kaspersky Lab in September 2016.
Source:
Windows zero-day exploit used in targeted attacks by FruityArmor APT