Even when NSA discloses zero days to vendors, some of them don't respond quickly and issue fixes.
Microsoft said the Nobelium threat group recently compromised one of its customer support agents and then used stolen account information to target some customers.
Microsoft researchers have disrupted a phishing and business email compromise campaign that used several separate cloud platforms to disguise its operations.
Microsoft's June Patch Tuesday includes fixes for six vulnerabilities that have been used in attacks in the wild.
Overall, Microsoft patched 55 flaws, including four critical-severity remote code execution bugs.