JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

Cybersecurity researchers are calling attention to a new campaign that's leveraging a combination of ClickFix lures and fake adult websites to deceive users into running malicious commands under the guise of a "critical" Windows security update. "Campaign leverages fake adult websites xHamster,...

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

A recently patched security flaw in Microsoft Windows Server Update Services WSUS has been exploited by threat actors to distribute a malware known as ShadowPad. "The attacker targeted Windows Servers with WSUS enabled, exploiting CVE-2025-59287 for initial access," AhnLab Security Intelligence...

KLA90453 SUI vulnerability in Microsoft Windows

A spoofing vulnerability vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-62459 Related products Microsoft-365 CVE list CVE-2025-62459 high Solution Install necessary updates from the KB section, tha...

November 20, 2025—KB5070312 (OS Build 22631.6276) Preview

None None...

Metasploit Wrap-Up 11/14/2025

It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...

📄 Windows Server Update Service Deserialization Remote Code Execution

This Metasploit module exploits a deserialization vulnerability in the legacy serialization mechanism in Windows Server Update Services WSUS. The vulnerability allows an unauthenticated attacker to create a specially crafted event, which triggers an unsafe deserialization upon server...

2025-11 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

KB5068781: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (November 2025)

The remote Windows host is missing security update 5068781. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208,...

KLA90059 Multiple vulnerability in Microsoft Open Source Software

A remote code execution vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-62220 Related products Microsoft-Windows CVE list CVE-2025-62220 critical Solutio...

KLA90061 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-47179 Related products Microsoft-Configuration-Manager CVE list CVE-2025-47179 high Solution Install necessary updates from...

KLA90054 ACE vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure Monitor Agent. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-59504 Related products Microsoft-Azure Azure-Monitor Azure-Monitor-Agent CVE list CVE-2025-59504 high Solution...

KLA90058 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Dynamics 365 Field Service...

KB5068861: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (November 2025)

The remote Windows host is missing security update 5068861 or hotpatch 5068966. It is, therefore, affected by multiple vulnerabilities - Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. CVE-2025-62208,...

KLA90053 PE vulnerability in Microsoft SQL Server

An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59499 Related products Microsoft-SQL-Server Microsoft-Azure CVE list CVE-2025-59499 critical KB list 5068405 5068403 5068401...

Intel® System Support Utility Advisory

Summary: A potential security vulnerability for the Intel® System Support Utility may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24842 Description: Uncontrolled search path for the Intel® Syst...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 WSUS RCE Exploit - README Summary This rep...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 ⚠ This tool is created solely for educatio...

Exploit for Deserialization of Untrusted Data in Microsoft

cve-2025-59287-exploit-poc CVE-2025-59287 is a critica...

Hackers Exploit WSUS Flaw to Spread Skuld Stealer Despite Microsoft Patch

Cybercriminals exploit a WSUS vulnerability to deploy Skuld Stealer malware, even after Microsoft released an urgent security patch...

The Bug Report - October 2025 Edition

The Bug Report – October 2025 Edition By Jonathan Omakun · October 31, 2025 Why am I here? Welcome to October's cybersecurity horror show, where the tricks are malicious and the treats are... Well, there aren't any treats. Just vulnerabilities that would make even the most seasoned security...