Cybersecurity experts warn of a stealthy Microsoft patch addressing a long-exploited Windows LNK zero-day vulnerability, CVE-2025-9491, now mitigated in November 2025 updates. Threat actors, including state-sponsored groups, have weaponized this flaw for years in espionage and malware campaigns, hiding malicious commands in shortcut files.
As searches for Windows LNK vulnerability patch and Microsoft zero-day fix spike amid Patch Tuesday alerts, organisations scramble to apply safeguards against these insidious attacks.
