zero-day spoofing attack

Check Point Research has identified a critical zero-day spoofing attack targeting Microsoft Internet Explorer on modern Windows 10/11 systems. The vulnerability, known as CVE-2024-38112, allows attackers to remotely execute code by tricking users into opening malicious Internet Shortcut (.url) files.