Microsoft plans to release an emergency out-of-band update to patch a critical Windows security vulnerability that is being actively exploited by malware. The so-called Shortcut exploit is being exploited by specially crafted shortcut files that point to malicious code and trick Windows into executing it without user interaction. Malware exploiting the vulnerability have included Stuxnet, Chymin and Dulkis, Zbot, and most recently Sality. Microsoft says it is releasing the update out of band is the best thing to do.”]
Source: https://grahamcluley.com/microsoft-readies-emergency-patch-shortcut-zeroday-flaw/