Page 1 of 1

CISA Beware! Hackers Are Actively Exploiting Windows Server Update Services RCE Flaw in the Wild

Posted: Wed Oct 29, 2025 1:26 pm
by Shane1145
Cybersecurity researchers are sounding the alarm after discovering that hackers are actively exploiting a critical remote code execution (RCE) vulnerability in Microsoft’s Windows Server Update Services (WSUS).

The flaw, tracked as CVE-2025-59287, allows unauthenticated attackers to run arbitrary code on vulnerable servers, and evidence suggests that these attacks are being carried out manually, a technique known as “hands-on-keyboard” reconnaissance .

https://gbhackers.com/hackers-are-activ ... -rce-flaw/