Trend Micro has reported that a vulnerability in Windows shortcut files, ZDI-CAN-25373, discovered by Trend Micro's bug bounty program platform Zero Day Initiative (ZDI), is being exploited by ...

A newly discovered cyber vulnerability, ZDI-CAN-25373, has been actively exploited by 11 state-sponsored threat groups from North Korea, Iran, Russia and China since 2017. According to the Trend Zero ...

Initiative (ZDI) has uncovered a critical vulnerability—designated ZDI-CAN-25373—in Microsoft Windows. This vulnerability is ...

But] Microsoft tagged it as “not meeting the bar servicing” in late September and said it wouldn’t release security updates to address it. … This heavily exploited Windows vulnerability (tracked as ...

"We discovered nearly a thousand Shell Link (.lnk) samples that exploit ZDI-CAN-25373; however, it is probable that the total number of exploitation attempts are much higher," they said.

State-sponsored hackers from Russia, China, Iran, and North Korea are exploiting Windows shortcut files to execute malicious ...

Amost a dozen state-sponsored threat groups from Russia, China, and North Korea have been exploiting a security flaw in ...

“ZDI identified nearly 1000 malicious .lnk files abusing ZDI-CAN-25373, a vulnerability that allows attackers to execute hidden malicious commands on a victim machine by leveraging crafted ...

// https://www.trendmicro.com/en_us/research/25/c/windows-shortcut-zero-day-exploit.html ...