Microsoft released a new security update on June 17th in an attempt to patch a vulnerability which allowed the Stuxnet Virus to exploit Windows systems. Attempts by Microsoft to fix the vulnerability did not address how LNK files use attributes to identify folder location. Microsoft confirmed that the flaw had been exploited in the wild. Exploits for the vulnerability are currently available for Metasploit, with videos available on Youtube on how to exploit the vulnerability. CERT/CC said hackers already know another method for bypassing Microsofts patches for the above issue.”]
Source: https://securityaffairs.co/wordpress/61701/hacking/microsoft-fix-stuxnet.html