Chinese Hackers Exploit Unpatched Windows Zero

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Exploit Windows Zero-Day Vulnerability Against European Diplomats Chinese state-sponsored hackers are exploiting a Windows zero-day vulnerability (CVE-2025-9491) to target European diplomats. The exploit involves using unpatched Windows shortcut files to deploy PlugX spying software, allowing attackers to gain deep access to compromised systems. This campaign has been linked to ongoing Chinese espionage efforts since at least 2017. 2 sources 50