[Stanley]

China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

A China-affiliated threat actor known as UNC6384 has been linked to a fresh set of attacks exploiting an unpatched Windows shortcut vulnerability to target European diplomatic and government entities between September and October 2025.
The activity targeted diplomatic organizations in Hungary, Belgium, Italy, and the Netherlands, as well as government agencies in Serbia, Arctic Wolf said in a

https://thehackernews.com/2025/10/china-...ndows.html

[Vectura]

This is no longer “if we’ll get hit”, it’s “when we’ll get hit.” A Windows shortcut (.LNK) flaw being used in diplomacy-focused attacks makes it clear this isn’t just spam or random ransomware anymore. If you’re running vulnerable systems, treat it like intrusion prep, not just a patch-day ticket.

[Birds dont sing]

This is no longer “if we’ll get hit”, it’s “when we’ll get hit.” A Windows shortcut (.LNK) flaw being used in diplomacy-focused attacks makes it clear this isn’t just spam or random ransomware anymore. If you’re running vulnerable systems, treat it like intrusion prep, not just a patch-day ticket.

Damn, everyone's edgy right of now because no one is safe

[RangoWorld]

How many vulnerabilities Windows must have had that was actively exploited in its lifetime?