ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

Itsecuritynews.Info • November 24, 2025

... advanced persistent threat (APT)… November 21, 2025. In "EN". Microsoft Issues Emergency Patch for Actively Exploited Critical WSUS Vulnerability.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShadowPad Malware Exploits WSUS Vulnerability for System Access Attackers exploited a critical vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287, to deploy ShadowPad malware. This backdoor, associated with China-linked APT groups, allows for full system access. Microsoft issued an emergency patch on November 21, 2025, to address this security flaw. 2 sources 33

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

The full story

Extracted Entities

Attack Types (1)

Malware (1)