Tool Blunts Threat from Windows Shortcut Flaw
Summary: Microsoft issued a stopgap "FixIt" tool to disable the Windows shortcut-file handling flaw found by researchers in Belarus, after its initial advice required editing the registry. SANS raised its threat warning to yellow, citing a publicly available proof-of-concept exploit embedded in open-source attack tools and weak antivirus detection, while noting the exploit can spread over network shares as well as USB devices.
Bottom line: The malware exploiting this flaw was aimed at computers tied to networks controlling manufacturing and power plants, and SANS states wide-scale exploitation is only a matter of time now that the exploit code is public.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026