All Windows 10 users must check their settings now to block worrying new thre... (2024)

Windows 10 update fixes scary new bug (Image: MICROSOFT)

• New Microsoft update shows end of Windows 10 may have started early
• Microsoft puts Windows 11 users on notice: upgrade now or your PC isn’t secure

Although most people don't use this ageing web browsing tool anymore the platform is often still hidden within the operating system.

Hackers have worked out that they simply need to send out a normal-appearing PDF file - via fake emails - which contains special Windows Internet Shortcut files.

Once clicked these then secretly call on the retired Internet Explorer (IE) to visit the attacker-controlled URL.

Microsoft introduces Windows 11 in 2021

"Check Point Research recently discovered that threat actors have been using novel (or previously unknown) tricks to lure Windows users for remote code execution," Check Point explained.

"By opening the URL with IE instead of the modern and much more secure Chrome/Edge browser on Windows, the attacker gained significant advantages in exploiting the victim’s computer, although the computer is running the modern Windows 10/11 operating system.

"These exploitation tricks – which have been actively used in the wild for at least one year, work on the latest Windows 10/11 operating systems."

It's thought this type of attack has been taking place since early last year although it's currently unclear how many users may have been infected.

Luckily, as long as your PC is updated the bug will be blocked and hackers will no longer be able t to take advantage.

"CPR disclosed the vulnerability to Microsoft in May 2024; Microsoft published patches on 9 July 2024," Check Point added.

Microsoft has marked the update, named CVE-2024-38112, as important so you should install the latest system software as soon as you can.

"Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure. See Acknowledgements for more information," the Redmond firm said in its notes.