Microsoft has released an emergency patch for a "critical" crack in its Windows operating system software that could let hackers take control of computers over the internet.
"The vulnerability could allow remote code execution if the icon of a specially crafted shortcut is displayed," the US technology giant said in a security bulletin ranked "Critical".
"An attacker who successfully exploited this vulnerability could gain the same user rights as the local user."
News that makes sense
Your trusted source for staying up-to-date with the world around you. Get free daily news updates and analysis, straight to your inbox.
Computer users commonly use shortcuts in the form of on-screen icons they can click to instantly awaken favoured applications.
The Windows flaw lets hackers booby-trap such icons with malicious software that could let them control machines from afar.
Microsoft routinely releases software patches the second Tuesday of each month, but resorts to making patches available "out of band" when it deems situations dangerous.
"Several families of malware have been attempting to attack this vulnerability," Microsoft Trustworthy Computing response manager Christopher Budd wrote in a blog post.
"We firmly believe that releasing the update out of band is the best thing to do to help protect our customers."
Some attacks have reportedly been directed at power plants and other vital infrastructure. People using computers running on any version of Windows software were urged to apply the update immediately.
