Microsoft issued an emergency patch for a critical vulnerability in Windows Server Update Services (WSUS), which could allow attackers to push malware disguised as system updates. The flaw affects WSUS versions from 2012 to 2025 and has a severity score of 9.8, prompting urgent warnings from CISA and CERT-EU. Exploiting this vulnerability could enable remote code execution across entire networks. Organizations are urged to patch and reboot affected servers immediately to prevent widespread compromise.

Read more:

https://cybernews.com/security/windows-wsus-vulnerability-microsoft-patch/