CISA releases warning about Windows Server Update Service bug, orders agencies to patch
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59287 | Deserialization RCE in Microsoft WSUS (Windows Server) | 9.8 | 100% | KEVPoC | KEV |
From the original article
3 min read at therecord.media
Federal agencies and businesses are being urged to immediately patch a vulnerability affecting a widely used Windows update tool after experts warned that it is being exploited by hackers. The Cybersecurity and Infrastructure Security Agency (CISA) sent out an urgent alert on Friday evening about CVE-2025-59287 — a vulnerability Microsoft included in its monthly set of security updates about two weeks ago.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.