攻击者目前正利用 Windows 服务器更新服务（WSUS）的一个高危漏洞发起攻击，该漏洞的概念验证（PoC）利用代码已公开。 该漏洞编号为 CVE-2025-59287，属于远程代码执行漏洞，仅影响一类 Windows 服务器——需启用 "WSUS 服务器角色 "，且作为组织内部其他 WSUS 服务器 ...

Network defenders have been encouraged to patch a new critical vulnerability in Windows Server Update Services (WSUS) which is being actively exploited. Microsoft issued an out-of-band update to fix ...

TL;DR Our telemetry indicates an active exploitation campaign targeting vulnerable Windows Server Update Services (WSUS) systems via CVE-2025-59287 (CVSS 9.8 – Critical). This document summarizes the ...

Microsoft has released an emergency out-of-band security update for Windows Server to address a probable remote code execution vulnerability tracked as CVE-2025-59287. The issue affects the Windows ...

More threat intel teams are sounding the alarm about a critical Windows Server Update Services (WSUS) remote code execution vulnerability, tracked as CVE-2025-59287 and now under active exploitation, ...

On the 14 th of October 2025, CVE-2025-59287 was published. Three security researchers, MEOW, f7d8c52bec79e42795cf15888b85cbad and Markus Wulftange (Code White GmbH ...

Hackers are exploiting a Windows Server vulnerability that can turn system updates into a malware delivery machine. Microsoft is urging users to download patches. Microsoft has released an emergency ...