A new Windows zero-day allows threat actors to use malicious JavaScript files to bypass Mark-of-the-Web security warnings. Threat actors are already seen using the zero-day bug in ransomware attacks.

A recent malicious campaign delivering Magniber ransomware has been targeting Windows home users with fake security updates.

Microsoft officially retired JScript years ago, along with proper support for the original Internet Explorer browser. However, the JScript engine still lingers in modern Windows installations ...