Microsoft has announced that it will release a fix for a widely-reported zero-day vulnerability in the how all current Windows versions handle shortcut (*.lnk) files. Microsoft had previously announced details about the vulnerability and released a temporary workaround that erases shortcut icons and replaces them with blank white icons. This out-of-band fix will be released Monday, more than a week before the software giant’s regularly-scheduled monthly security update release.
“Microsoft plans to release an out-of-band update to address (the shortcut vulnerability),” a posting to the Microsoft Malware Protection Center. The posting also describes how copycat attackers are predictably copying successful exploits, increasing the number of real-world attacks. Thus, Microsoft felt it couldn’t wait on the fix.
According to Microsoft, the fix should hit Windows Update at about 10:00 am Pacific Time (1:00 pm Eastern) on Monday. Given the severity of the flaw and its widespread effect across all supported Windows versions, we recommend that all Windows users immediately download and install this patch.
As our client, your company’s network security is our top priority. ANC performs routine maintenance, software updates, and system upgrades as part of your network security. Advanced Network Consulting has been servicing clients throughout Southern California for nearly 20 years. We’ve seen every form of viruses out there and our techs are constantly educating themselves on the latest threats and tactics. With two offices strategically located in La Mirada to serve Southeast LA County and North Orange County, and an office in Irvine to service South Orange County, same day appointments, scheduled maintenance and remote access appointments, phone support, and emergency calls are available 7 days a week.