Attackers are weaponizing vulnerabilities within hours of disclosure. From Microsoft's six zero-days to cloud-native malware and 287 malicious Chrome extensions, here's what security teams need to know this week.