A critical security threat has been identified for Microsoft Windows users, exposing PCs to potential attacks through a hidden vulnerability. The exploit involves using Windows Internet Shortcut files to direct users to an attacker-controlled URL via the retired Internet Explorer browser, bypassing more secure browsers like Chrome or Edge. This vulnerability poses a significant risk to confidentiality, integrity, and availability, prompting the US government to include it in its Known Exploit Vulnerability catalog.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a mandate for all federal Windows systems to be updated or shut down by July 30 to mitigate this threat. Microsoft has released a patch to address the vulnerability, urging users to apply the update promptly to safeguard their systems.
