Related Threat Clusters

Critical RCE Vulnerability in Windows Server Update Services Actively Exploited
Microsoft has released an out-of-band security update for a critical vulnerability, CVE-2025-59287, in Windows Server Update Services (WSUS) that allows unauthenticated remote code execution. The vulnerability, stemming…

17 articles · Updated November 1, 2025
Exploitation of Windows Server Update Services Vulnerability for Data Theft
Threat actors are exploiting a critical remote code execution vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287. This flaw allows attackers to access and steal sensitive data from…

2 articles · Updated November 1, 2025
Exploitation of Windows Server Update Services Flaw Leads to Data Theft
A critical vulnerability in Windows Server Update Services (WSUS), tracked as CVE-2025-59287, is being actively exploited by attackers to steal sensitive data from organizations globally. The flaw allows for remote code…

3 articles · Updated November 25, 2025

Recent Intelligence Reports

Attackers Exploit Windows Server Update Services Flaw to Steal Sensitive Organizational Data — Gbhackers · October 31, 2025
Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287) — Huntress · October 24, 2025