ZDI-CAN-25373: Serious zero-day hole in Windows shortcut is widely exploited
In March 2025, the Trend Zero Day Initiative™ (ZDI) announced an extremely critical zero-day vulnerability in Windows Shortcut files (.lnk) that allows attackers to execute hidden malicious commands on a victim's machine. The vulnerability, tracked a...
blog.fiscybersec.com6 min read