Microsoft released an emergency update for a critical WSUS flaw (CVSS 9.8) that allows unauthenticated RCE and is already being actively exploited.

Microsoft released an emergency update for a critical WSUS flaw (CVE-2025-59287) that allows unauthenticated RCE and is already being actively exploited.

Despite CISA and multiple firms confirming active exploitation by UNC6512, Microsoft lists the critical WSUS flaw (CVE-2025-59287) as only "more likely" to be exploited.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Threat actors are actively exploiting a new WSUS RCE flaw (CVE-2025-59287) to gain SYSTEM shells and deploy the dangerous ShadowPad backdoor. Patch immediately!

Threat actors are actively exploiting the critical WSUS RCE flaw (CVE-2025-59287) to gain SYSTEM access and deploy the powerful, Chinese-linked ShadowPad espionage backdoor.

Enterprise WSUS update servers began faltering around 13 July 2026. The disruption spread widely across corporate networks. Windows 10, Windows 11, and Windows Server systems all struggled to upda…