home.social

#cve_2025_59287 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cve_2025_59287, aggregated by home.social.

  1. The Threat Codex @[email protected] ·

    Analysis of ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287)
    #CVE_2025_59287 #ShadowPad
    asec.ahnlab.com/en/91166/

    #cve_2025_59287 #shadowpad
  2. The Threat Codex @[email protected] ·

    Scans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287
    #CVE_2025_59287
    isc.sans.edu/diary/32440

    #cve_2025_59287
  3. The Threat Codex @[email protected] ·

    CVE-2025-59287 WSUS Remote Code Execution
    #CVE_2025_59287
    hawktrace.com/blog/CVE-2025-59

    #cve_2025_59287
  4. :mastodon: decio @[email protected] ·

    Voilà… 💥 dangerosité de cette vulnérabilité confirmée par @GossiTheDog
    👇
    cyberplace.social/@GossiTheDog

    Il soulève aussi la possibilité d’une attaque par envoi de mise à jour malveillante post-programmée.

    ...et effectivement des instances WSUS sont visibles sur Internet

    ⚠️ Exploitation active signalée par Huntress :

    "Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287)"
    👇
    huntress.com/blog/exploitation

    #CyberVeille #cve_2025_59287

    #cyberveille #cve_2025_59287
  5. CyberVeille.ch @[email protected] ·

    📢 Exploitation active d’une vulnérabilité RCE dans WSUS (CVE-2025-59287)
    📝 Source: Huntress — Le billet détaille l’exploitation active de la vulnérabilité **CVE-2025-59287** dans **Windows Serve...
    📖 cyberveille : cyberveille.ch/posts/2025-10-2
    🌐 source : huntress.com/blog/exploitation
    #CVE_2025_59287 #IOC #Cyberveille

    #cve_2025_59287 #ioc #cyberveille
  6. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1024] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-54236 (secdb.nttzen.cloud/cve/detail/)
    - Name: Adobe Commerce and Magento Improper Input Validation Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Adobe
    - Product: Commerce and Magento
    - Notes: experienceleague.adobe.com/en/ ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-59287 (secdb.nttzen.cloud/cve/detail/)
    - Name: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Microsoft
    - Product: Windows
    - Notes: msrc.microsoft.com/update-guid ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251024 #cisa20251024 #cve_2025_54236 #cve_2025_59287 #cve202554236 #cve202559287

    #secdb #infosec #cve #cisa_kev #cisa_20251024 #cisa20251024
  7. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1024] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-54236 (secdb.nttzen.cloud/cve/detail/)
    - Name: Adobe Commerce and Magento Improper Input Validation Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Adobe
    - Product: Commerce and Magento
    - Notes: experienceleague.adobe.com/en/ ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-59287 (secdb.nttzen.cloud/cve/detail/)
    - Name: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Microsoft
    - Product: Windows
    - Notes: msrc.microsoft.com/update-guid ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251024 #cisa20251024 #cve_2025_54236 #cve_2025_59287 #cve202554236 #cve202559287

    #secdb #infosec #cve #cisa_kev #cisa_20251024 #cisa20251024
  8. ZEN SecDB @[email protected] ·

    🚨 [CISA-2025:1024] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2025-54236 (secdb.nttzen.cloud/cve/detail/)
    - Name: Adobe Commerce and Magento Improper Input Validation Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Adobe
    - Product: Commerce and Magento
    - Notes: experienceleague.adobe.com/en/ ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2025-59287 (secdb.nttzen.cloud/cve/detail/)
    - Name: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Microsoft
    - Product: Windows
    - Notes: msrc.microsoft.com/update-guid ; nvd.nist.gov/vuln/detail/CVE-2

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20251024 #cisa20251024 #cve_2025_54236 #cve_2025_59287 #cve202554236 #cve202559287

    #cve202559287 #cve202554236 #cve_2025_59287 #cve_2025_54236 #cisa20251024 #cisa_20251024
  9. :mastodon: decio @[email protected] ·

    Pour la série: vendredi patch urgent & rush en prod 😅

    Microsoft a publié une mise à jour hors-cycle corrigeant une RCE critique (CVE-2025-59287) dans Windows Server Update Services (WSUS pour les intimes).

    « Si vous n’avez pas encore installé la mise à jour de sécurité Windows d’octobre 2025, nous vous recommandons d’appliquer cette mise à jour OOB à la place. Après l’installation, vous devrez redémarrer votre système. »

    Une démonstration d’exploitation / PoC public est disponible : hawktrace.com/blog/CVE-2025-59

    La possibilité du "wormable" évoqué, fait monter la pression par les temps qui courent…

    Actions recommandées :

    • Appliquer l’update d’urgence fourni par Microsoft dès que possible (OOB/cumulative). Redémarrage requis. ⬅️ 🩹

    ⬇️

    🔗 support.microsoft.com/en-us/to

    🔗 msrc.microsoft.com/update-guid

    Si vous ne pouvez pas patcher immédiatement : désactiver le rôle WSUS ou bloquer les ports 8530 et 8531 au niveau du pare-feu hôte en attendant

    Gravité : CVSS élevé (~9.8)
    👇
    vulnerability.circl.lu/vuln/CV

    #CyberVeille #CVE_2025_59287

    #cyberveille #cve_2025_59287