Plus a free micropatch until Redmond fixes the flaw - There's a Windows Themes spoofing zero-day bug on the loose that allows attackers to steal people's NTLM credentials.