Attackers Exploit Windows Server Update Services Flaw to Steal Sensitive Organizational Data

Gbhackers •Divya • October 31, 2025

Sophos researchers have identified real-world exploitation of a newly disclosed vulnerability in Windows Server Update Services (WSUS), where threat actors are harvesting sensitive data from organizations worldwide. The critical remote code execution flaw, tracked as CVE-2025-59287, has become a prime target for attackers seeking to breach enterprise networks and extract valuable information without authentication requirements. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Windows Server Update Services Vulnerability for Data Theft Threat actors are exploiting a critical remote code execution vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287. This flaw allows attackers to access and steal sensitive data from organizations globally without requiring authentication. Sophos researchers have reported real-world incidents of this exploitation targeting enterprise networks. 2 sources 30

Extracted Entities

Attackers Exploit Windows Server Update Services Flaw to Steal Sensitive Organizational Data

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)