CRITICAL MICROSOFT WSUS FLAW EXPLOITED IN WILD AFTER INSUFFICIENT PATCH

Summary from the TLDR InfoSec newsletter

Microsoft issued urgent out-of-band patches to fully address CVE-2025-59287, a critical vulnerability in WSUS that allows remote code execution with SYSTEM privileges, following active exploitation after the release of a proof-of-concept and the initial patch on October 14 proved inadequate.