tldrdaily.news logo
Tag

Wsus

All articles tagged with #wsus

Microsoft and Google Warn of Active WSUS and Windows Service Exploits
technology4 months ago

Microsoft and Google Warn of Active WSUS and Windows Service Exploits

A security update for Windows Server Update Service (WSUS) addressing a critical vulnerability has inadvertently disabled hotpatching on some Windows Server 2025 devices. Microsoft has halted the update for hotpatch-enrolled systems and released a new patch (KB5070893) that fixes the vulnerability without disrupting hotpatching. Administrators are advised to pause updates, install the new patch, and monitor their systems for continued security and stability.

via BleepingComputer|
#cve-2025-59287#hotpatching#security-update
Microsoft WSUS Vulnerability Under Active Attack, Urgent Updates Issued
security4 months ago

Microsoft WSUS Vulnerability Under Active Attack, Urgent Updates Issued

A critical vulnerability in Windows Server Update Services (WSUS), tracked as CVE-2025-59287, is actively exploited by threat actors across multiple organizations, despite Microsoft releasing an emergency patch. The flaw allows unauthenticated remote code execution, and attackers are conducting reconnaissance and data exfiltration, posing a significant risk to affected servers. Experts warn that the vulnerability's ease of exploitation and the patch's incomplete fix increase the threat landscape, urging organizations to apply updates promptly.

via theregister.com|
#cve-2025-59287#cybersecurity#exploitation
Active Exploitation of Critical Windows Server Update Service Vulnerability
security4 months ago

Active Exploitation of Critical Windows Server Update Service Vulnerability

A critical remote code execution vulnerability in Microsoft WSUS (CVE-2025-59287) was actively exploited in the wild shortly after an emergency patch was released. The flaw allows unauthenticated attackers to execute arbitrary code on affected servers, primarily impacting systems with the WSUS role enabled. Microsoft recommends immediate patching or applying workarounds such as disabling the WSUS role or blocking high-risk ports to mitigate the risk.

via Unit 42|
#active-exploitation#cve-2025-59287#microsoft-patch
Urgent: Microsoft Releases Emergency Patch for Critical WSUS Vulnerability Exploited in Attacks
technology4 months ago

Urgent: Microsoft Releases Emergency Patch for Critical WSUS Vulnerability Exploited in Attacks

CISA has ordered U.S. government agencies to urgently patch a critical Windows Server WSUS vulnerability (CVE-2025-59287) that is actively exploited in attacks, with evidence of in-the-wild exploitation. Microsoft released emergency updates, and agencies are advised to disable the WSUS role if patches cannot be immediately applied. Over 2,800 WSUS instances are exposed online, highlighting the urgency of patching to prevent remote code execution by attackers.

via BleepingComputer|
#cisa#patch#technology
Microsoft Releases Urgent Patch for Actively Exploited WSUS Vulnerability
technology4 months ago

Microsoft Releases Urgent Patch for Actively Exploited WSUS Vulnerability

Microsoft released a critical out-of-band update for Windows Server Update Services (WSUS) to fix a severe vulnerability (CVE-2025-59287) that allows remote code execution, affecting servers with the WSUS role enabled. The update is urgent, especially as WSUS is deprecated, prompting Microsoft to recommend switching to cloud-based solutions like Intune. A reboot is required, and administrators are advised to disable the role or block specific ports if immediate patching isn't possible.

via theregister.com|
#cve-2025-59287#remote-code-execution#security-patch
Microsoft Addresses Windows 11 Update Failures and Introduces New Recovery Feature
technology6 months ago

Microsoft Addresses Windows 11 Update Failures and Introduces New Recovery Feature

Microsoft has fixed a known issue causing Windows 11 24H2 updates to fail via WSUS with error 0x80240069, primarily affecting enterprise environments. The fix is being rolled out automatically through Known Issue Rollback, and administrators can manually apply the update or deploy the rollback policy to resolve the issue.

via BleepingComputer|
#0x80240069#known-issue-rollback#technology