Microsoft Patched Windows LNK Vulnerability Abused by Hackers to Hide Malicious Code

Microsoft has silently patched a Windows shortcut vulnerability that threat actors have been exploiting since 2017 to hide malicious commands from users inspecting file properties. The flaw, tracked as CVE-2025-9491, was addressed in Microsoft’s November 2025 Patch Tuesday updates but was not listed among the 63 officially patched vulnerabilities.​ The vulnerability first came to public […]

The post Microsoft Patched Windows LNK Vulnerability Abused by Hackers to Hide Malicious Code appeared first on Cyber Security News.