This month’s Patch Tuesday arrived with a rather unwelcome security surprise. Microsoft had expected things to be somewhat sedate; however, instead of two vulnerabilities that it expected needed patching, it got hit with four, including a new zero-day Internet Explorer exploit. Further, Microsoft has had to update its Malicious Software Removal Tool to include Win32/Helpud, a Trojan that’s been around since 2008. In addition, it’s keeping an eye on a VBScript vulnerability that could allow remote code execution.