Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation
Source Reddit InfoSec News
Description
Microsoft has silently patched a long-standing vulnerability in the Windows LNK file handling mechanism after years of active exploitation. The flaw allowed attackers to execute arbitrary code by tricking users into opening or previewing specially crafted shortcut (. LNK) files, a technique historically used in targeted attacks and malware campaigns. Although Microsoft did not publicly announce the patch initially, the fix addresses a high-severity issue that impacts Windows systems globally. European organizations using Windows are at risk due to the widespread use of the OS and the potential for this exploit to be used in spear-phishing or supply chain attacks. The vulnerability affects the confidentiality, integrity, and availability of affected systems by enabling remote code execution without user authentication, often requiring minimal user interaction. Mitigation involves applying the latest Windows updates immediately, disabling the parsing of LNK files in untrusted locations, and enhancing endpoint detection capabilities for suspicious LNK file activity. Countries with high Windows market penetration and significant critical infrastructure, such as Germany, France, the UK, and the Netherlands, are most likely to be targeted. Given the ease of exploitation, the scope of affected systems, and the impact on core security properties, this threat is assessed as high severity. Defenders should prioritize patching and monitoring for related attack indicators to reduce exposure to this stealthy but dangerous vulnerability.