Threat actors are exploiting new Windows zero-day vulnerabilities, using public exploits to gain SYSTEM access and bypass Microsoft Defender.