Windows update fixes long‑abused shortcut file flaw.

Microsoft patched a long‑exploited LNK vulnerability that allowed attackers to hide malicious commands inside shortcut files. The issue stemmed from Windows displaying only the first 260 characters of a file’s target path, letting threat actors bury PowerShell or BAT scripts beyond view. Attackers had been disguising these shortcuts as harmless documents, with exploitation continuing into October. The November update now reveals the full command string, while Microsoft notes that existing warnings and Defender detections already help limit the risk.

Read more:

https://www.securityweek.com/microsoft-silently-mitigated-exploited-lnk-vulnerability/