CPR Warns Threat Actors are Leveraging Internet Explorer in New Zero-Day Spoofing Attack (CVE-2024-38112)

Check Point Research (CPR) warns of a new spoofing attack from threat actors using Internet Explorer shortcut files to lure Windows 10/11 users for remote code execution. CPR recommends Microsoft customers patch immediately.   Key Findings Threat actors are luring Windows 10/11 users into enabling remote code execution and accessing their computers This vulnerability has been used in the wild for over one year, potentially impacting millions of users CPR disclosed the vulnerability to Microsoft in May 2024; Microsoft published patches on 9 July 2024 CPR recommends users regularly patch and update all software to ensure greatest protection against cyber threats […]

The post CPR Warns Threat Actors are Leveraging Internet Explorer in New Zero-Day Spoofing Attack (CVE-2024-38112) appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/MwolTH1
via