Information security
fromTheregister
1 week agoMicrosoft fixes Windows shortcut flaw exploited for years
A Windows .lnk shortcut parsing flaw (CVE-2025-9491) allowed hidden command arguments and covert code execution; Microsoft silently mitigated it in November 2025.