Hackers Exploit WSUS Flaw to Spread Skuld Stealer Despite Microsoft Patch

  • Hackers Exploit WSUS Flaw to Spread Skuld Stealer Despite Microsoft Patch
    Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
    hackread.com


    A vulnerability in the Windows Server Update Service (WSUS) is being actively exploited by cybercriminals to plant Skuld Staler malware, according to new research from the cybersecurity firm Darktrace.
    This service, which helps companies manage Microsoft updates in a centralised manner across corporate networks, contains a flaw, identified as CVE-2025-59287, which Microsoft disclosed in October 2025. Because WSUS servers hold key permissions within a network, they are considered high-value targets.

    “Secure Your World, Protect Your Life.”
    “Empowering Each Other to Stay Secure.”

  • https://hackread.com/hackers-exploi…icrosoft-patch/ A vulnerability in the Windows Server Update Service (WSUS) is being actively exploited by cybercriminals to plant Skuld Staler malware, according to new research from the cybersecurity firm Darktrace [URL:https://hackread.com/tag/Darktrace/]. This service, which helps companies manage Microsoft updates in a centralised manner across corporate networks, contains a flaw, identified as CVE-2025-59287, which Microsoft disclosed in October 2025. Because WSUS servers hold key permissions within a network, they are considered high-value targets.

    Hi Negan, thanks for sharing this important information. It's concerning to see how quickly hackers are adapting to exploit even minor vulnerabilities. The WSUS flaw highlights the critical need for constant vigilance and prompt updates, even when patches are available. Companies should ensure their WSUS servers are secured and monitored closely to prevent such attacks. Stay safe out there!

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!