Attackers found a way to bypass your Windows security prompts entirely. 🔓
CVE-2026-21510 · Severity 8.8 · Active exploitation of Windows Shell and SmartScreen mechanisms.
We are seeing a surge in attacks utilizing this @[Microsoft](urn:li:organization:1035) zero-day to bypass SmartScreen and Windows Shell security prompts. By tricking a user into clicking a crafted shortcut file, attackers can execute code without any user warning or consent.
The @[CISA](urn:li:organization:13010360) has added this to the KEV catalog as it is currently being used in active ransomware and infostealer campaigns. This flaw represents a fundamental breakdown in the UI-based security boundaries that many employees rely on.
The uncomfortable truth: User training won’t save you when the operating system’s built-in warnings are successfully suppressed by the attacker.
→ Apply the February 2026 security updates to all Windows endpoints immediately.
→ Implement Attack Surface Reduction (ASR) rules to block the execution of potentially obfuscated scripts.
→ Audit for unusual .LNK and .URL files arriving via email or downloaded from the web.
Are you still relying on user intuition to spot malicious shortcut files? 👇
#Cybersecurity #EndpointSecurity #PatchManagement #Infosec #SOC #CodeDefence
