- Official Post
Hackers Exploit WSUS Flaw to Spread Skuld Stealer Despite Microsoft Patch
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
hackread.com
A vulnerability in the Windows Server Update Service (WSUS) is being actively exploited by cybercriminals to plant Skuld Staler malware, according to new research from the cybersecurity firm Darktrace.
This service, which helps companies manage Microsoft updates in a centralised manner across corporate networks, contains a flaw, identified as CVE-2025-59287, which Microsoft disclosed in October 2025. Because WSUS servers hold key permissions within a network, they are considered high-value targets.