Windows Server Update Services (WSUS) vulnerability abused to harvest sensitive data
news.sophos.com
Exploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code