This time, the crooks got there first - only 1 security hole patched, but it's a zero-day.