Cybercriminals from at least six nation-states are exploiting a longstanding zero-day vulnerability in Microsoft Windows, which allows hidden commands via manipulated .lnk files to conduct espionage and data theft. This vulnerability has been used since 2017, largely by state-backed actors from countries including North Korea, Iran, Russia, China, India, and Pakistan, targeting governments and critical sectors, with a significant portion attributed to North Korean financial motives. Despite active exploitation, Microsoft has yet to commit to a patch, citing the limited practical use of the vulnerability, while researchers emphasize the need for urgent remediation. Matt Kapko has more.