Attackers have weaponized a recently patched Windows Server Update Services (WSUS) remote code execution bug (CVE‑2025‑59287) to gain SYSTEM-level access to WSUS hosts and deliver the ShadowPad backdoor, using native Windows tools and simple staging techniques that make detection and containment...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to urgently remediate a critical Windows Server Update Services (WSUS) vulnerability — tracked as CVE-2025-59287 — after Microsoft released an emergency out‑of‑band patch and multiple security firms...