Windows’ Shortcut to Disaster: Microsoft Ignores Zero-Day Vulnerability Exploited by Nation-State Hackers
The Windows zero-day vulnerability, ZDI-CAN-25373, has been a hacker’s delight, exploited by nation-state groups from North Korea to China. Despite rampant attacks since 2017, Microsoft has yet to patch it, claiming it doesn’t “meet the bar for servicing.” Meanwhile, hackers are partying like it’s 1999—on your computer.
Hot Take:
Looks like Microsoft’s strategy for tackling zero-day vulnerabilities is to let them simmer until they’re a full-blown cybersecurity stew. Why patch a leak when you can build a boat around it, right?
Key Points:
- Zero-day vulnerability, ZDI-CAN-25373, exploited by nation-state hackers since 2017.
- Hackers use shortcut (.lnk) files to run malicious code on Windows systems.
- Microsoft refuses to issue a security patch, citing low severity.
- Majority of attacks are linked to hackers from North Korea, Iran, Russia, and China.
- Vulnerability impacts sectors like government, energy, finance, and telecommunications.
Already a member? Log in here