{"metadata": {"vulnerability": "cve-2025-59287", "count": 728, "kinds": {"milestone": 13, "sighting": 653, "kev": 17, "other": 45}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-11T19:36:03.690Z", "date_only": false, "value": "2025-09-11T19:36:03.690Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-59287", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": true, "value": "2025-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0879", "record": "CERTFR-2025-AVI-0879", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-14T07:00:00Z", "date_only": false, "value": "2025-10-14T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-14T07:00:00Z", "date_only": false, "value": "2025-10-14T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-10-14T07:00:00Z", "date_only": false, "value": "2025-10-14T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-14T14:00:00Z", "date_only": false, "value": "2025-10-14T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2025-59287", "field": "containers.cna.datePublic"}, {"timestamp": "2025-10-14T16:03:45Z", "date_only": false, "value": "2025-10-14T16:03:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2521e576-cc13-4e79-8a60-d530e4978b53", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310"}, {"timestamp": "2025-10-14T16:38:44Z", "date_only": false, "value": "2025-10-14T16:38:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cd03e5d7-ab56-41e3-8300-8477495b16c8", "url": "https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review"}, {"timestamp": "2025-10-14T17:01:47.629Z", "date_only": false, "value": "2025-10-14T17:01:47.629Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-59287", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-14T17:16:11Z", "date_only": false, "value": "2025-10-14T17:16:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-943J-4893-6RFQ", "record": "GHSA-943J-4893-6RFQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-14T17:16:11.670Z", "date_only": false, "value": "2025-10-14T17:16:11.670", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59287", "record": "FKIE_CVE-2025-59287", "field": "published"}, {"timestamp": "2025-10-14T18:03:45.875Z", "date_only": false, "value": "2025-10-14T18:03:45.875739Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-14T18:03:45.875Z", "date_only": false, "value": "2025-10-14T18:03:45.875739Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-14T18:30:36Z", "date_only": false, "value": "2025-10-14T18:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-943J-4893-6RFQ", "record": "GHSA-943J-4893-6RFQ", "field": "published"}, {"timestamp": "2025-10-14T20:57:38Z", "date_only": false, "value": "2025-10-14T20:57:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1a0cde48-f3e7-4a0c-b316-9c963617a1ce", "url": "https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/"}, {"timestamp": "2025-10-14T22:00:00Z", "date_only": false, "value": "2025-10-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-14T22:00:00Z", "date_only": false, "value": "2025-10-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-14T22:00:00Z", "date_only": false, "value": "2025-10-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0879", "record": "CERTFR-2025-AVI-0879", "field": "last_revision_date"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0879", "record": "CERTFR-2025-AVI-0879", "field": "initial_release_date"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0879", "record": "CERTFR-2025-AVI-0879", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-15T03:21:05.508Z", "date_only": false, "value": "2025-10-15T03:21:05.508563Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-92d70f62-8abeb418d4d5c739", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5d21a17b-916f-4cf0-95d0-18a31b9b403e", "url": "https://poliverso.org/objects/0477a01e-92d70f62-8abeb418d4d5c739"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": true, "value": "2025-10-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-26108", "record": "CNVD-2025-26108", "field": "submitTime"}, {"timestamp": "2025-10-19T10:45:37.162Z", "date_only": false, "value": "2025-10-19T10:45:37.162670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3m3k4pfhjd62e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b721fd54-4c21-4fc2-b324-a1264468fcf2", "url": "https://bsky.app/profile/warthogtk.bsky.social/post/3m3k4pfhjd62e"}, {"timestamp": "2025-10-19T22:00:00Z", "date_only": false, "value": "2025-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-10-20T01:30:22.017Z", "date_only": false, "value": "2025-10-20T01:30:22.017265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3lo5hh5vc2m", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "5aef3047-d561-4880-8507-684a4bf01a9e", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3lo5hh5vc2m"}, {"timestamp": "2025-10-20T02:19:38.221Z", "date_only": false, "value": "2025-10-20T02:19:38.221846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3lqvkin3c2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "71d61c7a-48dc-4327-bbed-f7dbbdcd64d4", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3lqvkin3c2b"}, {"timestamp": "2025-10-20T16:27:21.889Z", "date_only": false, "value": "2025-10-20T16:27:21.889897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3nabfyu7a2v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "436a17bd-e0c8-4e3f-ab8f-408c6dbb76b7", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3nabfyu7a2v"}, {"timestamp": "2025-10-20T16:28:42.452Z", "date_only": false, "value": "2025-10-20T16:28:42.452843Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Viss.mastodon.social.ap.brid.gy/post/3m3nadh76mf22", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7022fba9-7781-4be3-959d-2fc8506c5d8e", "url": "https://bsky.app/profile/Viss.mastodon.social.ap.brid.gy/post/3m3nadh76mf22"}, {"timestamp": "2025-10-20T21:00:07Z", "date_only": false, "value": "2025-10-20T21:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BAsNzJZdhJW2MG9rbCjXN74mbWFjGBfSvbUTeOUySb5QZrU", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1e3bdf62-89a5-4c1b-849d-9e2d98ac66c4"}, {"timestamp": "2025-10-21T09:24:45.833Z", "date_only": false, "value": "2025-10-21T09:24:45.833807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m3oz4lqnqc25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3b31bc31-8188-4544-8d1d-77c3e75a8e34", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m3oz4lqnqc25"}, {"timestamp": "2025-10-22T08:30:54.786Z", "date_only": false, "value": "2025-10-22T08:30:54.786205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/il-nb.bsky.social/post/3m3rglbozgo23", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a36c8817-7cee-405a-b735-05522052d6ab", "url": "https://bsky.app/profile/il-nb.bsky.social/post/3m3rglbozgo23"}, {"timestamp": "2025-10-23T00:36:29.608Z", "date_only": false, "value": "2025-10-23T00:36:29.608319Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3t4juxvgk2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "322bb947-5e35-4f34-8284-9c425b8ff785", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3t4juxvgk2z"}, {"timestamp": "2025-10-23T01:32:01.089Z", "date_only": false, "value": "2025-10-23T01:32:01.089822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3t7n5ly3n2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6c400e1d-c87c-4166-88ac-ba6da531944c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3t7n5ly3n2k"}, {"timestamp": "2025-10-23T07:00:00Z", "date_only": false, "value": "2025-10-23T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-10-23T22:00:00Z", "date_only": false, "value": "2025-10-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "timestamps.asserted_at", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-59287", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "evidence.0.details.date_added", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "timestamps.first_seen_at", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0930", "record": "CERTFR-2025-AVI-0930", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "status.status_updated_at", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-59287", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-10-24T04:16:16.406Z", "date_only": false, "value": "2025-10-24T04:16:16.406060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neowin.net/post/3m3vzbsce2r2q", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6b8821fe-b9be-4cc1-be75-0731bf37662c", "url": "https://bsky.app/profile/neowin.net/post/3m3vzbsce2r2q"}, {"timestamp": "2025-10-24T06:23:20.699Z", "date_only": false, "value": "2025-10-24T06:23:20.699187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intune.best/post/3m3waeym6us26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1ac81e94-e70c-4d37-b6df-ed0384f45be7", "url": "https://bsky.app/profile/intune.best/post/3m3waeym6us26"}, {"timestamp": "2025-10-24T07:00:00Z", "date_only": false, "value": "2025-10-24T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-24T07:00:00Z", "date_only": false, "value": "2025-10-24T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-24T07:38:08.582Z", "date_only": false, "value": "2025-10-24T07:38:08.582946Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/circl/statuses/115427998942114003", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "261f5f5b-796d-4608-8414-68ab811aebe5", "url": "https://social.circl.lu/users/circl/statuses/115427998942114003"}, {"timestamp": "2025-10-24T08:00:39.441Z", "date_only": false, "value": "2025-10-24T08:00:39.441934Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115428087498774597", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "79f7b9d4-de77-4d82-8a24-4dc87b2f6e3b", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115428087498774597"}, {"timestamp": "2025-10-24T08:24:42.569Z", "date_only": false, "value": "2025-10-24T08:24:42.569331Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-10-24T08:43:33.407Z", "date_only": false, "value": "2025-10-24T08:43:33.407596Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/115428256179486799", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7a99033f-e6c9-4d52-805a-a2867f7a4852", "url": "https://infosec.exchange/users/decio/statuses/115428256179486799"}, {"timestamp": "2025-10-24T11:09:29.790Z", "date_only": false, "value": "2025-10-24T11:09:29.790442Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-24T11:09:29.790Z", "date_only": false, "value": "2025-10-24T11:09:29.790442Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0310", "record": "NCSC-2025-0310", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-24T11:26:24Z", "date_only": false, "value": "2025-10-24T11:26:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2025/10/angriffe-gegen-microsoft-wsus-installationen-update-verfugbar", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cf39ffe6-989b-4b0f-9eb4-d65f3138ca2e", "url": "https://www.cert.at/de/warnungen/2025/10/angriffe-gegen-microsoft-wsus-installationen-update-verfugbar"}, {"timestamp": "2025-10-24T11:57:26Z", "date_only": false, "value": "2025-10-24T11:57:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/infernalheaven/f9ab2609d5538578f3810bee0552c2c6", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1a5f4209-6e1d-44ad-b5bc-50105dbfee05", "url": "https://gist.github.com/infernalheaven/f9ab2609d5538578f3810bee0552c2c6"}, {"timestamp": "2025-10-24T12:00:23.153Z", "date_only": false, "value": "2025-10-24T12:00:23.153434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/se-nyheter.bsky.social/post/3m3wt7oowot2g", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6963d7d6-bc82-430a-9340-7b9c5b82f5cb", "url": "https://bsky.app/profile/se-nyheter.bsky.social/post/3m3wt7oowot2g"}, {"timestamp": "2025-10-24T12:04:58.597Z", "date_only": false, "value": "2025-10-24T12:04:58.597179Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/115429048198867950", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "4260e322-5513-470c-9701-c4bcd8b9768d", "url": "https://infosec.exchange/users/zeljkazorz/statuses/115429048198867950"}, {"timestamp": "2025-10-24T12:15:08.927Z", "date_only": false, "value": "2025-10-24T12:15:08.927028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bsi.bund.de/post/3m3wu23prjf26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9eb6b1d5-9008-4109-adef-d898dea829ed", "url": "https://bsky.app/profile/bsi.bund.de/post/3m3wu23prjf26"}, {"timestamp": "2025-10-24T12:15:18.103Z", "date_only": false, "value": "2025-10-24T12:15:18.103165Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ie-news.bsky.social/post/3m3wu2emllc2q", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e25c2292-fbd9-46c4-a15a-fc698dd45149", "url": "https://bsky.app/profile/ie-news.bsky.social/post/3m3wu2emllc2q"}, {"timestamp": "2025-10-24T12:30:22.744Z", "date_only": false, "value": "2025-10-24T12:30:22.744342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ie-nb.bsky.social/post/3m3wuvcvx262m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6bf965f9-769d-4126-b34c-6b5030c7cf57", "url": "https://bsky.app/profile/ie-nb.bsky.social/post/3m3wuvcvx262m"}, {"timestamp": "2025-10-24T12:31:43.971Z", "date_only": false, "value": "2025-10-24T12:31:43.971236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3wuxq5o3425", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1cabe15b-edd5-428e-b100-1f20a5d288bb", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3wuxq5o3425"}, {"timestamp": "2025-10-24T12:57:23.989Z", "date_only": false, "value": "2025-10-24T12:57:23.989138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3m3wwfgcsv227", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "007170f8-0ca9-4c9c-9127-13bc47bb901f", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3m3wwfgcsv227"}, {"timestamp": "2025-10-24T13:16:21.547Z", "date_only": false, "value": "2025-10-24T13:16:21.547863Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115429328895551663", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "db586e33-138e-4944-ac09-8bbbeaed0666", "url": "https://infosec.exchange/users/jbhall56/statuses/115429328895551663"}, {"timestamp": "2025-10-24T13:16:30.042Z", "date_only": false, "value": "2025-10-24T13:16:30.042533Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3wxhronrc27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c34546ea-2ff3-46c8-a67e-897194d52965", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3wxhronrc27"}, {"timestamp": "2025-10-24T13:26:10.813Z", "date_only": false, "value": "2025-10-24T13:26:10.813850Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115429367439029064", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "77d1c50f-aa44-4351-a6af-ccd17b8788b2", "url": "https://infosec.exchange/users/edwardk/statuses/115429367439029064"}, {"timestamp": "2025-10-24T13:27:08.905Z", "date_only": false, "value": "2025-10-24T13:27:08.905504Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115429371319474946", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e6634e4a-5797-4141-a092-035e040971d8", "url": "https://infosec.exchange/users/edwardk/statuses/115429371319474946"}, {"timestamp": "2025-10-24T13:27:11.964Z", "date_only": false, "value": "2025-10-24T13:27:11.964434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m3wy2wdlty2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "02593ee6-aabf-42df-83c8-79cd4a863fa6", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m3wy2wdlty2b"}, {"timestamp": "2025-10-24T13:28:13.379Z", "date_only": false, "value": "2025-10-24T13:28:13.379687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3wy4rftxd2v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dd6f0406-4c10-4acc-9a5f-4ddb5ac4c399", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3wy4rftxd2v"}, {"timestamp": "2025-10-24T14:05:25Z", "date_only": false, "value": "2025-10-24T14:05:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2025-monthly-rollup-av25-666", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "401f1220-91f4-4714-b616-fa68af29fa37", "url": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2025-monthly-rollup-av25-666"}, {"timestamp": "2025-10-24T14:30:00Z", "date_only": false, "value": "2025-10-24T14:30:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/10/microsoft-issues-emergency-patch-for.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "816cc11c-4bb7-4e95-b6ee-0960ce00e84c", "url": "https://thehackernews.com/2025/10/microsoft-issues-emergency-patch-for.html"}, {"timestamp": "2025-10-24T14:55:07.189Z", "date_only": false, "value": "2025-10-24T14:55:07.189846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/winbuzzer.com/post/3m3x4y53ebo2r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8da53d94-5849-4bce-99f3-576f50b6337e", "url": "https://bsky.app/profile/winbuzzer.com/post/3m3x4y53ebo2r"}, {"timestamp": "2025-10-24T15:10:27.407Z", "date_only": false, "value": "2025-10-24T15:10:27.407689Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3x5tdpebot2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cedda906-6805-4899-a6ab-97dd0fa1fffa", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3x5tdpebot2"}, {"timestamp": "2025-10-24T16:31:30Z", "date_only": false, "value": "2025-10-24T16:31:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al25-015-vulnerability-impacting-microsoft-windows-server-update-services-cve-2025-59287", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2e13cec8-5988-494b-9880-0b2da8ba8562", "url": "https://cyber.gc.ca/en/alerts-advisories/al25-015-vulnerability-impacting-microsoft-windows-server-update-services-cve-2025-59287"}, {"timestamp": "2025-10-24T16:35:19.392Z", "date_only": false, "value": "2025-10-24T16:35:19.392430Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/115430111221821074", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4d5b2901-4e90-417d-820d-8d3defed9c5d", "url": "https://social.tchncs.de/users/gborn/statuses/115430111221821074"}, {"timestamp": "2025-10-24T16:35:47.836Z", "date_only": false, "value": "2025-10-24T16:35:47.836895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3m3xcm5iqm226", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a9bcbf5f-0489-410b-be72-923cb923accb", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3m3xcm5iqm226"}, {"timestamp": "2025-10-24T16:38:36.373Z", "date_only": false, "value": "2025-10-24T16:38:36.373722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3xcr6urwx25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7d2a09fb-5afa-434c-895e-f53ab7692b3b", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3xcr6urwx25"}, {"timestamp": "2025-10-24T16:41:07.601Z", "date_only": false, "value": "2025-10-24T16:41:07.601264Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115430134056007798", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "e46b2eca-aa06-417a-a155-ab9349bc7f96", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115430134056007798"}, {"timestamp": "2025-10-24T16:44:55.028Z", "date_only": false, "value": "2025-10-24T16:44:55.028617Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/115430147992307420", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "afe0d0e3-45a8-426e-8bdf-9d874fb0f593", "url": "https://cyberplace.social/users/GossiTheDog/statuses/115430147992307420"}, {"timestamp": "2025-10-24T16:49:42Z", "date_only": false, "value": "2025-10-24T16:49:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7787", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2af018a9-48bd-42ca-9d26-2c0d0796f52d", "content": "Microsoft just patched a critical WSUS flaw (CVE-2025-59287) \u2014 and attackers are already using it.\n\nOne crafted request = full SYSTEM control.\n\nThe twist? It comes from BinaryFormatter \u2014 the same tool Microsoft killed off last year.\n\nPatch now \u2193 https://thehackernews.com/2025/10/microsoft-issues-emergency-patch-for.html", "url": "https://t.me/thehackernews/7787"}, {"timestamp": "2025-10-24T16:52:15.158Z", "date_only": false, "value": "2025-10-24T16:52:15.158827Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115430177805565887", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "40f13939-da57-42e8-8534-b55be63a98ba", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115430177805565887"}, {"timestamp": "2025-10-24T16:53:13.118Z", "date_only": false, "value": "2025-10-24T16:53:13.118353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3m3xdkqah322j", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2599cbc0-27d4-4c21-9216-f4b842d11bf8", "url": "https://bsky.app/profile/mynameisv.bsky.social/post/3m3xdkqah322j"}, {"timestamp": "2025-10-24T16:54:32.744Z", "date_only": false, "value": "2025-10-24T16:54:32.744841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m3xdnp6px32u", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ed158f48-a8d5-414a-b402-e20ed1d08e57", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m3xdnp6px32u"}, {"timestamp": "2025-10-24T16:56:31.424Z", "date_only": false, "value": "2025-10-24T16:56:31.424108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3xdra3v3p25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "72cdbdb5-1940-418f-9a2c-362e094fd343", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3xdra3v3p25"}, {"timestamp": "2025-10-24T16:56:42.317Z", "date_only": false, "value": "2025-10-24T16:56:42.317348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3m3xdrikjvs2j", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "68ac479b-55cc-44e3-bc7b-c77a6bf3691e", "url": "https://bsky.app/profile/mynameisv.bsky.social/post/3m3xdrikjvs2j"}, {"timestamp": "2025-10-24T17:02:30.846Z", "date_only": false, "value": "2025-10-24T17:02:30.846934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m3xe3wl4oc27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4cd3bb6c-d972-403d-a6c5-0810c0e0e5b3", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m3xe3wl4oc27"}, {"timestamp": "2025-10-24T17:22:28.720Z", "date_only": false, "value": "2025-10-24T17:22:28.720366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3xf7nayk223", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e0c4dbae-54da-4180-ae8c-8045a63109ee", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3xf7nayk223"}, {"timestamp": "2025-10-24T17:25:49.858Z", "date_only": false, "value": "2025-10-24T17:25:49.858459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m3xfffbzpc23", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c1b6a800-19b3-4985-b110-358418145293", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3m3xfffbzpc23"}, {"timestamp": "2025-10-24T17:25:50.910Z", "date_only": false, "value": "2025-10-24T17:25:50.910531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m3xffiuyg223", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c0342ff0-b7f4-4a62-917b-119f7760a3e3", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3m3xffiuyg223"}, {"timestamp": "2025-10-24T17:34:00Z", "date_only": false, "value": "2025-10-24T17:34:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/vulnerabilities-threats/microsoft-emergency-patch-windows-server-bug", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "61ac8fe2-30c7-4afd-992f-baa986bc08cc", "url": "https://www.darkreading.com/vulnerabilities-threats/microsoft-emergency-patch-windows-server-bug"}, {"timestamp": "2025-10-24T17:48:45Z", "date_only": false, "value": "2025-10-24T17:48:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/54355", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e9ec65de-1570-496f-bc2f-a89e38eedbb6", "content": "Critical Windows Server WSUS Vulnerability Exploited in the Wild\u00a0\nhttps://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n\nCVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available.\nThe post Critical Windows Server WSUS Vulnerability Exploited in the Wild\u00a0 (https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/54355"}, {"timestamp": "2025-10-24T18:09:48.744Z", "date_only": false, "value": "2025-10-24T18:09:48.744177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/harpcoin.co/post/3m3xhubyzxk2u", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "02c734f5-97d7-4b16-94a6-f9f6b798a9d0", "url": "https://bsky.app/profile/harpcoin.co/post/3m3xhubyzxk2u"}, {"timestamp": "2025-10-24T18:10:03Z", "date_only": false, "value": "2025-10-24T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1ada1bd3-b285-477d-9106-ac66d6edc865"}, {"timestamp": "2025-10-24T18:13:25.314Z", "date_only": false, "value": "2025-10-24T18:13:25.314093Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/expelsecurity.bsky.social/post/3m3xi2omzec2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "26e00d98-36e5-4b33-9ca5-5a6e2b31a023", "url": "https://bsky.app/profile/expelsecurity.bsky.social/post/3m3xi2omzec2a"}, {"timestamp": "2025-10-24T18:48:05.689Z", "date_only": false, "value": "2025-10-24T18:48:05.689410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3m3xjypufwi2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c5bf9477-f155-4f48-9468-b5e4fbad7385", "url": "https://bsky.app/profile/technology-news.bsky.social/post/3m3xjypufwi2a"}, {"timestamp": "2025-10-24T19:37:08.036Z", "date_only": false, "value": "2025-10-24T19:37:08.036425Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4980454", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2382863f-3879-4670-8ae1-d854e29a9d5d", "url": "https://feedsin.space/feed/CISAKevBot/items/4980454"}, {"timestamp": "2025-10-24T19:50:50Z", "date_only": false, "value": "2025-10-24T19:50:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/rgzBR0BQz714_SJAapOD8S-GSXjswZdrotCfKRprzrufLA", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f797c00b-fecc-461e-82c9-a7f41bde0e96"}, {"timestamp": "2025-10-24T20:25:06.745Z", "date_only": false, "value": "2025-10-24T20:25:06.745467Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tugate.ch/post/3m3xpg6ts7o2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "42331caf-208e-4e35-a370-e15e03c576ee", "url": "https://bsky.app/profile/tugate.ch/post/3m3xpg6ts7o2c"}, {"timestamp": "2025-10-24T21:14:52.852Z", "date_only": false, "value": "2025-10-24T21:14:52.852180Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/115431210515460672", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "29c96711-96d2-44d3-a5c7-543a26ff198b", "url": "https://infosec.exchange/users/obivan/statuses/115431210515460672"}, {"timestamp": "2025-10-24T21:15:43.834Z", "date_only": false, "value": "2025-10-24T21:15:43.834755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3m3xs7hehbxx2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cf7d56b9-eaa7-4950-9d02-c0be77921c2d", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3m3xs7hehbxx2"}, {"timestamp": "2025-10-24T21:31:50.405Z", "date_only": false, "value": "2025-10-24T21:31:50.405466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3m3xt5jvtci2t", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ca05de43-dbd2-4f39-998b-600c51ce0fde", "url": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3m3xt5jvtci2t"}, {"timestamp": "2025-10-24T21:42:41.794Z", "date_only": false, "value": "2025-10-24T21:42:41.794133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rogeragrimes.bsky.social/post/3m3xtqxtcrk2h", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3e6476d8-03d7-42bb-ba6d-48efa7788b7f", "url": "https://bsky.app/profile/rogeragrimes.bsky.social/post/3m3xtqxtcrk2h"}, {"timestamp": "2025-10-24T23:42:06.843Z", "date_only": false, "value": "2025-10-24T23:42:06.843345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m3y2gfjama2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "61938d16-e71a-48ff-a079-ba817c671e40", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m3y2gfjama2k"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "35865c09-8ffd-47df-9a6b-7eab9fe64183"}, {"timestamp": "2025-10-25T00:04:11.806Z", "date_only": false, "value": "2025-10-25T00:04:11.806765Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3y3nx6k4u2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3e601b3c-4f15-4b9b-9a06-7e10b3ca2706", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m3y3nx6k4u2a"}, {"timestamp": "2025-10-25T00:11:54.098Z", "date_only": false, "value": "2025-10-25T00:11:54.098305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3m3y42iddcwb2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "27b4ea65-d44c-493e-9bba-ee9923d9fabb", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3m3y42iddcwb2"}, {"timestamp": "2025-10-25T00:21:14Z", "date_only": false, "value": "2025-10-25T00:21:14+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-59287", "field": "timestamps.asserted_at", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-25T00:21:14Z", "date_only": false, "value": "2025-10-25T00:21:14+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-59287", "field": "timestamps.first_seen_at", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-25T00:30:07Z", "date_only": false, "value": "2025-10-25T00:30:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=75DFEC44-D28F-5BF7-B0DD-C7D99E9C2B67", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d61c3be4-4aee-4395-9b27-fe0a40729284", "url": "https://sploitus.com/exploit?id=75DFEC44-D28F-5BF7-B0DD-C7D99E9C2B67"}, {"timestamp": "2025-10-25T00:47:40.640Z", "date_only": false, "value": "2025-10-25T00:47:40.640403Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/115432047223526377", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "161837d8-33f9-4d48-ad04-cdde85c9fd68", "url": "https://infosec.exchange/users/alexandreborges/statuses/115432047223526377"}, {"timestamp": "2025-10-25T01:51:34.906Z", "date_only": false, "value": "2025-10-25T01:51:34.906177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3m3ybnyntfl2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f90fdcbf-52d1-44ff-aa15-f4a364110d95", "url": "https://bsky.app/profile/opsmatters.com/post/3m3ybnyntfl2a"}, {"timestamp": "2025-10-25T01:51:35.695Z", "date_only": false, "value": "2025-10-25T01:51:35.695690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3m3ybnz56j42v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4b76518a-61ac-4265-a24b-e77ee70a8241", "url": "https://bsky.app/profile/potato.software/post/3m3ybnz56j42v"}, {"timestamp": "2025-10-25T02:12:29.275Z", "date_only": false, "value": "2025-10-25T02:12:29.275523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b50394b2-4fbd-4464-8407-c8b18023bd7f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b"}, {"timestamp": "2025-10-25T02:30:17.109Z", "date_only": false, "value": "2025-10-25T02:30:17.109019Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3ydt6pooc2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9b6bd14a-4098-4a1f-bb52-76abc44ec002", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3ydt6pooc2m"}, {"timestamp": "2025-10-25T02:34:04Z", "date_only": false, "value": "2025-10-25T02:34:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/56835", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9c45ca16-8055-4f98-bb43-cc626049a590", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWSUS Unauthenticated RCE\nURL\uff1ahttps://github.com/jiansiting/CVE-2025-59287\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/56835"}, {"timestamp": "2025-10-25T03:00:11Z", "date_only": false, "value": "2025-10-25T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H6703odx4t-rFBb2leiJuxAT8KFrfD6Xz_1LfZHqckBumcQ", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3e1155e6-7538-42ab-87b8-7892a4e3a34a"}, {"timestamp": "2025-10-25T03:03:18.895Z", "date_only": false, "value": "2025-10-25T03:03:18.895601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3yfoanq7d2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4705b460-8b00-4c77-a0ca-0bf6056cb6eb", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m3yfoanq7d2b"}, {"timestamp": "2025-10-25T03:20:39Z", "date_only": false, "value": "2025-10-25T03:20:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "14b5add7-cad0-427b-9b91-64e0c660882a"}, {"timestamp": "2025-10-25T03:56:03.912Z", "date_only": false, "value": "2025-10-25T03:56:03.912708Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-59287", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-25T03:56:03.912Z", "date_only": false, "value": "2025-10-25T03:56:03.912708Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59287", "record": "FKIE_CVE-2025-59287", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-25T04:01:28.520Z", "date_only": false, "value": "2025-10-25T04:01:28.520642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yiwb5s6o2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d8f97fc7-753c-4500-906d-cbb26e2a474f", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yiwb5s6o2z"}, {"timestamp": "2025-10-25T04:02:11.363Z", "date_only": false, "value": "2025-10-25T04:02:11.363604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yixjvlnx26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bab06cf8-b2c5-4736-9671-087226d52bae", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yixjvlnx26"}, {"timestamp": "2025-10-25T04:25:27Z", "date_only": false, "value": "2025-10-25T04:25:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/m10i-0nyx/9c2a4860c12668270e3f8a9d673626b7", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ecb938e9-acd3-4971-be23-873ae1a85408", "url": "https://gist.github.com/m10i-0nyx/9c2a4860c12668270e3f8a9d673626b7"}, {"timestamp": "2025-10-25T06:33:06.637Z", "date_only": false, "value": "2025-10-25T06:33:06.637615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secqube.com/post/3m3yrfezmol2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8674b27e-311a-49d0-9407-f40bfa9b3eec", "url": "https://bsky.app/profile/secqube.com/post/3m3yrfezmol2n"}, {"timestamp": "2025-10-25T06:49:21.974Z", "date_only": false, "value": "2025-10-25T06:49:21.974668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3yschgfhh2b", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "fdbb47b6-6b4d-4b47-89d5-08bd646841da", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3yschgfhh2b"}, {"timestamp": "2025-10-25T06:52:05.152Z", "date_only": false, "value": "2025-10-25T06:52:05.152636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m3yshbkx7k25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1217757c-72f0-4dfe-9909-7263f1603e1e", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m3yshbkx7k25"}, {"timestamp": "2025-10-25T07:07:46.536Z", "date_only": false, "value": "2025-10-25T07:07:46.536413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3ytdeqat62n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6f96300b-d92f-475e-acac-ffca41712a4e", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3ytdeqat62n"}, {"timestamp": "2025-10-25T07:08:18Z", "date_only": false, "value": "2025-10-25T07:08:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/microsoft-rilevato-sfruttamento-in-rete-della-cve-2025-59287", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4b2cc74f-b1a3-4e07-948b-0d1321f05cca", "url": "https://www.acn.gov.it/portale/w/microsoft-rilevato-sfruttamento-in-rete-della-cve-2025-59287"}, {"timestamp": "2025-10-25T07:12:23.530Z", "date_only": false, "value": "2025-10-25T07:12:23.530784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m3ytlld3wk2i", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b49b41d6-7398-4d72-8956-556d0a4b4f28", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m3ytlld3wk2i"}, {"timestamp": "2025-10-25T08:34:25.876Z", "date_only": false, "value": "2025-10-25T08:34:25.876483Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a28d046c-8e073b88fc73bb54", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e850b693-12fb-4875-8421-43af173e24e5", "url": "https://poliverso.org/objects/0477a01e-a28d046c-8e073b88fc73bb54"}, {"timestamp": "2025-10-25T09:41:34.178Z", "date_only": false, "value": "2025-10-25T09:41:34.178499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3m3z3wfrjbc2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "77329184-7648-449a-9dcc-c1e1ea9737dd", "url": "https://bsky.app/profile/potato.software/post/3m3z3wfrjbc2n"}, {"timestamp": "2025-10-25T09:47:14.394Z", "date_only": false, "value": "2025-10-25T09:47:14.394433Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3z4ak5t3p2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "85767f21-587c-49de-bec0-bcad9063f66e", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3z4ak5t3p2m"}, {"timestamp": "2025-10-25T09:48:18.398Z", "date_only": false, "value": "2025-10-25T09:48:18.398098Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3z4ch46ft2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "59a0d79b-0209-468f-bd37-87b715bf3a3d", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3z4ch46ft2k"}, {"timestamp": "2025-10-25T09:55:20.840Z", "date_only": false, "value": "2025-10-25T09:55:20.840976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3z4ozty6s2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c253bd54-a62e-4e81-bf68-4dfedc72630f", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3z4ozty6s2z"}, {"timestamp": "2025-10-25T10:30:11.936Z", "date_only": false, "value": "2025-10-25T10:30:11.936270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3z6ne77yf2m", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "32c93c9e-3369-444e-9ed5-25a0dd662549", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3z6ne77yf2m"}, {"timestamp": "2025-10-25T10:45:23.580Z", "date_only": false, "value": "2025-10-25T10:45:23.580066Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/115434397562306815", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c840f748-6cec-4a71-89a2-aa2b0ecd764d", "url": "https://infosec.exchange/users/decio/statuses/115434397562306815"}, {"timestamp": "2025-10-25T10:59:42.550Z", "date_only": false, "value": "2025-10-25T10:59:42.550293Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115434453874370698", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b24de413-29e7-43dc-bee5-d5411da7540c", "url": "https://infosec.exchange/users/threatcodex/statuses/115434453874370698"}, {"timestamp": "2025-10-25T11:08:48.106Z", "date_only": false, "value": "2025-10-25T11:08:48.106329Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m3zasd36us2l", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c78b62c5-5a53-4887-bd1f-dedc1917815f", "url": "https://bsky.app/profile/shiojiri.com/post/3m3zasd36us2l"}, {"timestamp": "2025-10-25T11:10:32.844Z", "date_only": false, "value": "2025-10-25T11:10:32.844473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m3zavhdxk22l", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a8f86806-c27b-4acf-b64c-8624b6d5684a", "url": "https://bsky.app/profile/shiojiri.com/post/3m3zavhdxk22l"}, {"timestamp": "2025-10-25T11:23:23.076Z", "date_only": false, "value": "2025-10-25T11:23:23.076045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3zbmfv4sd2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "791cc262-c5f1-4edf-995a-23d14d29f4b4", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3zbmfv4sd2b"}, {"timestamp": "2025-10-25T11:42:53.097Z", "date_only": false, "value": "2025-10-25T11:42:53.097088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3zcpd2eqe2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1f46937a-af1c-4afe-8b13-34d3e5bcacf5", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3zcpd2eqe2k"}, {"timestamp": "2025-10-25T11:47:54.499Z", "date_only": false, "value": "2025-10-25T11:47:54.499137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3zcxiqm45w2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ef8cb026-39e1-4fae-89a3-267cc9ea272b", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3zcxiqm45w2"}, {"timestamp": "2025-10-25T12:14:56.160Z", "date_only": false, "value": "2025-10-25T12:14:56.160369Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115434749615337896", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7d09aa11-4afa-4f44-a3a9-a356c139df36", "url": "https://infosec.exchange/users/dragonjar/statuses/115434749615337896"}, {"timestamp": "2025-10-25T12:37:43.200Z", "date_only": false, "value": "2025-10-25T12:37:43.200549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3zfrersba27", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "105bee23-14c1-43a2-a8f6-58f85cef397f", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3zfrersba27"}, {"timestamp": "2025-10-25T12:54:32.533Z", "date_only": false, "value": "2025-10-25T12:54:32.533086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m3zgphhwnd2s", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e3144fb0-53b8-4265-9c42-3f09e160c893", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m3zgphhwnd2s"}, {"timestamp": "2025-10-25T13:18:21Z", "date_only": false, "value": "2025-10-25T13:18:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=E14C74AD-797A-5892-AB6E-B834E94DE383", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "13597b65-be44-4f6b-80a9-15f8174d2557", "url": "https://sploitus.com/exploit?id=E14C74AD-797A-5892-AB6E-B834E94DE383"}, {"timestamp": "2025-10-25T13:33:45.648Z", "date_only": false, "value": "2025-10-25T13:33:45.648865Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m3zivjy7as2l", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "28b55b1d-b5da-41e5-98ef-2de300da8ba9", "url": "https://bsky.app/profile/shiojiri.com/post/3m3zivjy7as2l"}, {"timestamp": "2025-10-25T14:29:13.293Z", "date_only": false, "value": "2025-10-25T14:29:13.293362Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3m3zlxpsa2es2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cdeb28b5-ec17-40e1-8240-24b9df01df68", "url": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3m3zlxpsa2es2"}, {"timestamp": "2025-10-25T14:40:20.319Z", "date_only": false, "value": "2025-10-25T14:40:20.319702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3m3zmmmwwby2d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "33462c53-1ff0-4031-b589-725212190d08", "url": "https://bsky.app/profile/yayafa.bsky.social/post/3m3zmmmwwby2d"}, {"timestamp": "2025-10-25T15:13:37.752Z", "date_only": false, "value": "2025-10-25T15:13:37.752156Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/115435452328511522", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0f094656-cfdc-4645-ae80-ab4bbc9a3e2e", "url": "https://infosec.exchange/users/obivan/statuses/115435452328511522"}, {"timestamp": "2025-10-25T15:13:59.492Z", "date_only": false, "value": "2025-10-25T15:13:59.492336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3m3zoiadp6ms2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7686bfcf-f673-4189-80e9-dd5125a65115", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3m3zoiadp6ms2"}, {"timestamp": "2025-10-25T17:12:01.805Z", "date_only": false, "value": "2025-10-25T17:12:01.805253Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/115435917889384153", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a64d2fc8-e6e7-42a1-b3bc-650008e8a4f4", "url": "https://infosec.exchange/users/patrickcmiller/statuses/115435917889384153"}, {"timestamp": "2025-10-25T17:20:08.961Z", "date_only": false, "value": "2025-10-25T17:20:08.961570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m3zvkeyufr25", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "ae9db99f-f911-429e-b7af-f927b4a73916", "url": "https://bsky.app/profile/cyberhub.blog/post/3m3zvkeyufr25"}, {"timestamp": "2025-10-25T18:37:46Z", "date_only": false, "value": "2025-10-25T18:37:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mStnTJTHzdpho_b7nOrUFPnP5VZQZTdLEJ4U-7O-6HJTPA", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ee2d7627-6b5d-4ff3-848f-1fae1d73828f"}, {"timestamp": "2025-10-25T18:37:47Z", "date_only": false, "value": "2025-10-25T18:37:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jDf146G11K9hkQdOuGbVwgMUrpdNoCj_oEFz1K60kKyK0g", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5ca540b2-ba27-4889-954a-2c231034048b"}, {"timestamp": "2025-10-25T19:00:09Z", "date_only": false, "value": "2025-10-25T19:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/a86KR-3cqy5F_YoNShBfuogvImJk4d1-eJ6yspFMlOyXCyA", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "06219241-1146-4993-8c58-0509795ecbac"}, {"timestamp": "2025-10-25T20:32:27.574Z", "date_only": false, "value": "2025-10-25T20:32:27.574684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/walknews.bsky.social/post/3m42acbc53s2u", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "61ae77e4-654e-4e88-9f46-bc7379ce5517", "url": "https://bsky.app/profile/walknews.bsky.social/post/3m42acbc53s2u"}, {"timestamp": "2025-10-25T20:32:33Z", "date_only": false, "value": "2025-10-25T20:32:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/vb-ekman/b02d389437b66ae8716198f1779ba40e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2ec4fdb5-6a79-407e-9c1d-e17c4d5c8c5e", "url": "https://gist.github.com/vb-ekman/b02d389437b66ae8716198f1779ba40e"}, {"timestamp": "2025-10-25T20:42:06.736Z", "date_only": false, "value": "2025-10-25T20:42:06.736270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m42atgbwif2p", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9400aaae-c7ed-44dd-b5d6-ae950efd2c67", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m42atgbwif2p"}, {"timestamp": "2025-10-25T21:00:05Z", "date_only": false, "value": "2025-10-25T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CIibF5krEqXHuHs5TqPPIuQ0aPwRPsmd2xxsRxQT1I_xhBk", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c59ef2a2-4f57-4396-a6ef-b532578a5765"}, {"timestamp": "2025-10-25T21:02:30.160Z", "date_only": false, "value": "2025-10-25T21:02:30.160591Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwnqwf2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d8dd9dc9-9920-42fe-8383-8a7b45de30aa", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwnqwf2a"}, {"timestamp": "2025-10-25T21:18:11.220Z", "date_only": false, "value": "2025-10-25T21:18:11.220173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42ctzluws2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7e468976-886f-4d7e-aa77-097675f0f708", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42ctzluws2n"}, {"timestamp": "2025-10-25T21:23:30.736Z", "date_only": false, "value": "2025-10-25T21:23:30.736596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42d5iyqjs2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6c878eed-246d-4147-ba96-410b839dd4c6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42d5iyqjs2n"}, {"timestamp": "2025-10-25T21:25:27.588Z", "date_only": false, "value": "2025-10-25T21:25:27.588802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42dazmews2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a00e20fe-0027-40d0-9f4a-b6f2c17ca7cb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42dazmews2n"}, {"timestamp": "2025-10-25T21:27:18.100Z", "date_only": false, "value": "2025-10-25T21:27:18.100496Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/115436921644252945", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "dc3c9edd-27f1-47ed-9519-2709ddac498e", "url": "https://infosec.exchange/users/mttaggart/statuses/115436921644252945"}, {"timestamp": "2025-10-25T21:28:37.462Z", "date_only": false, "value": "2025-10-25T21:28:37.462977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42dgnvgcs2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "92d34653-64db-4932-8f48-66a6528214c1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42dgnvgcs2n"}, {"timestamp": "2025-10-25T21:28:45.159Z", "date_only": false, "value": "2025-10-25T21:28:45.159862Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/115436927364546301", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "aca165ad-07eb-4c1d-8792-5562cdd0d721", "url": "https://infosec.exchange/users/mttaggart/statuses/115436927364546301"}, {"timestamp": "2025-10-25T21:30:21.103Z", "date_only": false, "value": "2025-10-25T21:30:21.103232Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42djo7l7s2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ddc89758-6fef-48a4-a9f1-ebfd753abb9c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42djo7l7s2n"}, {"timestamp": "2025-10-25T21:35:17.695Z", "date_only": false, "value": "2025-10-25T21:35:17.695333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m42dsn76gd2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9dcc1be5-cab0-4c97-896d-6ceada9aea8a", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m42dsn76gd2e"}, {"timestamp": "2025-10-25T21:58:39.608Z", "date_only": false, "value": "2025-10-25T21:58:39.608480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cocanews.bsky.social/post/3m42f4fngpz2d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6fa406fc-97d6-4c23-a4f4-7ff57854796e", "url": "https://bsky.app/profile/cocanews.bsky.social/post/3m42f4fngpz2d"}, {"timestamp": "2025-10-25T22:40:08.065Z", "date_only": false, "value": "2025-10-25T22:40:08.065806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m42hgkwzbz2k", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "8adb402e-ba50-47c0-ab86-c1f3fac3b029", "url": "https://bsky.app/profile/cyberhub.blog/post/3m42hgkwzbz2k"}, {"timestamp": "2025-10-26T02:18:01.291Z", "date_only": false, "value": "2025-10-26T02:18:01.291045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m42tm72l2x2t", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "35c65cf0-29b3-483d-b3f8-ab66d0ca1338", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m42tm72l2x2t"}, {"timestamp": "2025-10-26T02:23:54.619Z", "date_only": false, "value": "2025-10-26T02:23:54.619213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3m42twjkvm22g", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8e116c28-4dd5-49bf-b873-4c80104829f8", "url": "https://bsky.app/profile/cyberkendra.com/post/3m42twjkvm22g"}, {"timestamp": "2025-10-26T03:12:01.320Z", "date_only": false, "value": "2025-10-26T03:12:01.320964Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/115438277151091702", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cbbca9dc-52e4-4c9a-9a0d-f1bf95dd4683", "url": "https://infosec.exchange/users/patrickcmiller/statuses/115438277151091702"}, {"timestamp": "2025-10-26T07:19:36.047Z", "date_only": false, "value": "2025-10-26T07:19:36.047069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m43ehh4r5w2w", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cd1a224b-55ef-4ecd-971f-6a5954f75c71", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m43ehh4r5w2w"}, {"timestamp": "2025-10-26T07:23:36.178Z", "date_only": false, "value": "2025-10-26T07:23:36.178299Z", "kind": "sighting", "label": "Exploited", "source": "https://research.eye.security/wsus-deserialization-exploit-in-the-wild-cve-2025-59287/", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "88335fef-d967-48c4-9fa6-a1ef97beb41f", "url": "https://research.eye.security/wsus-deserialization-exploit-in-the-wild-cve-2025-59287/"}, {"timestamp": "2025-10-26T07:32:48.252Z", "date_only": false, "value": "2025-10-26T07:32:48.252235Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/19771c30-1865-418d-8329-9b74748acb52", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "03e90081-b824-4f19-9a53-7233f0ba50e2", "url": "https://vulnerability.circl.lu/comment/19771c30-1865-418d-8329-9b74748acb52"}, {"timestamp": "2025-10-26T10:05:55.601Z", "date_only": false, "value": "2025-10-26T10:05:55.601569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m43nqrv5cc2p", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "725d7002-eb15-49d6-95d9-4f77fd246a1c", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m43nqrv5cc2p"}, {"timestamp": "2025-10-26T12:30:26.153Z", "date_only": false, "value": "2025-10-26T12:30:26.153233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m43vtbg2bk2f", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "01f298a4-29a7-4ac9-bc96-cdea89d99b55", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m43vtbg2bk2f"}, {"timestamp": "2025-10-26T14:31:19.470Z", "date_only": false, "value": "2025-10-26T14:31:19.470484Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115440948163283523", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8a4db43e-2b01-49e8-9c95-7d159d1ef3e7", "url": "https://mstdn.ca/users/rfwaveio/statuses/115440948163283523"}, {"timestamp": "2025-10-26T17:05:09.767Z", "date_only": false, "value": "2025-10-26T17:05:09.767925Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m44f6jkf622z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5d09bf41-a659-479f-b8e8-9b4c96f17d4d", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m44f6jkf622z"}, {"timestamp": "2025-10-26T18:39:41.432Z", "date_only": false, "value": "2025-10-26T18:39:41.432812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khfqbwk2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "130ca4d2-508a-4994-8eb0-7ed6f670cc49", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khfqbwk2c"}, {"timestamp": "2025-10-26T18:39:41.981Z", "date_only": false, "value": "2025-10-26T18:39:41.981400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk2whc2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "575da60b-4f61-4b95-b491-9781fd8eface", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk2whc2c"}, {"timestamp": "2025-10-26T18:39:42.556Z", "date_only": false, "value": "2025-10-26T18:39:42.556411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk2yfs2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9f1d2e08-3f0d-4889-b060-92768471cac3", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk2yfs2c"}, {"timestamp": "2025-10-26T18:39:43.078Z", "date_only": false, "value": "2025-10-26T18:39:43.078083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk32ec2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fe4c83b0-9ea7-45aa-b446-f4ce8f9e61ed", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3m44khk32ec2c"}, {"timestamp": "2025-10-26T18:39:45.276Z", "date_only": false, "value": "2025-10-26T18:39:45.276841Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115441925070452573", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "11dc41be-7206-4e95-98b0-c58f0aae6085", "url": "https://infosec.exchange/users/shadowserver/statuses/115441925070452573"}, {"timestamp": "2025-10-26T19:12:15Z", "date_only": false, "value": "2025-10-26T19:12:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ar0x4/2bf81477149b443f333052f11bc86d0d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "23849468-f44d-4531-bb22-84e588e02dc1", "url": "https://gist.github.com/ar0x4/2bf81477149b443f333052f11bc86d0d"}, {"timestamp": "2025-10-26T22:12:38.406Z", "date_only": false, "value": "2025-10-26T22:12:38.406758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wedinjw2o", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3a2adff9-77d0-4219-b5ea-85bc7a415331", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wedinjw2o"}, {"timestamp": "2025-10-26T22:13:10.657Z", "date_only": false, "value": "2025-10-26T22:13:10.657404Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wfcfr2v2f", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "24df4927-7daa-4502-ab28-67b31c3c3f05", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wfcfr2v2f"}, {"timestamp": "2025-10-26T23:00:00Z", "date_only": false, "value": "2025-10-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0930", "record": "CERTFR-2025-AVI-0930", "field": "last_revision_date"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0930", "record": "CERTFR-2025-AVI-0930", "field": "initial_release_date"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0930", "record": "CERTFR-2025-AVI-0930", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5f80967b-53d1-416a-a25e-8fa1bb6a1d21"}, {"timestamp": "2025-10-27T00:48:37.712Z", "date_only": false, "value": "2025-10-27T00:48:37.712398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/walknews.bsky.social/post/3m4573bc5da2x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c623981a-72c5-448c-9bca-c2ffd2f63a78", "url": "https://bsky.app/profile/walknews.bsky.social/post/3m4573bc5da2x"}, {"timestamp": "2025-10-27T01:36:26.444Z", "date_only": false, "value": "2025-10-27T01:36:26.444821Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/innovatopia.bsky.social/post/3m45bqpfphc2u", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5d843d1d-9ddf-4a2c-88dc-1581859a1f74", "url": "https://bsky.app/profile/innovatopia.bsky.social/post/3m45bqpfphc2u"}, {"timestamp": "2025-10-27T02:18:22.536Z", "date_only": false, "value": "2025-10-27T02:18:22.536889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m45e3qavcj2o", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a2924253-cab9-417e-88c6-58accc1da653", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m45e3qavcj2o"}, {"timestamp": "2025-10-27T02:21:33.668Z", "date_only": false, "value": "2025-10-27T02:21:33.668820Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m45ebh5mxf2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fcbbaa6d-854c-47a2-aefc-aa07ae6fde6c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m45ebh5mxf2k"}, {"timestamp": "2025-10-27T04:25:16.436Z", "date_only": false, "value": "2025-10-27T04:25:16.436063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m45l6mzdna24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e342199e-30b4-4848-892d-7aa8f9c572a9", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m45l6mzdna24"}, {"timestamp": "2025-10-27T07:00:54.089Z", "date_only": false, "value": "2025-10-27T07:00:54.089430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3m45tuwhed527", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e2ac18e7-adc8-4066-b6d7-1ba7bb648518", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3m45tuwhed527"}, {"timestamp": "2025-10-27T08:14:50.007Z", "date_only": false, "value": "2025-10-27T08:14:50.007552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0x401.bsky.social/post/3m45xyzz47k2w", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "60b5f8ce-125e-4d95-b49e-32be96a5d8f4", "url": "https://bsky.app/profile/0x401.bsky.social/post/3m45xyzz47k2w"}, {"timestamp": "2025-10-27T08:34:41Z", "date_only": false, "value": "2025-10-27T08:34:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/18387", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0884d64e-9473-4e39-8025-98877725d8ba", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows Server Update Service\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows Server Update Service (WSUS), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 proof-of-concept \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2025/10/27/cve-2025-59287/", "url": "https://t.me/xakep_ru/18387"}, {"timestamp": "2025-10-27T09:00:05Z", "date_only": false, "value": "2025-10-27T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZUTGmtSEE7XNsqh5MFfP6oM9uk0-KZeASr5gwV6QxuDkHtI", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2cb77d2c-4589-44b6-952c-ca45f7da4f38"}, {"timestamp": "2025-10-27T09:08:57Z", "date_only": false, "value": "2025-10-27T09:08:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=691A932D-0588-5F2A-9496-CA64A4B240C2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b727fe79-8fc9-4fdc-82d6-15a08426ab09", "url": "https://sploitus.com/exploit?id=691A932D-0588-5F2A-9496-CA64A4B240C2"}, {"timestamp": "2025-10-27T09:42:01.708Z", "date_only": false, "value": "2025-10-27T09:42:01.708730Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/115445473024117845", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bb620003-7430-4f3d-9be2-e42d1723817a", "url": "https://infosec.exchange/users/patrickcmiller/statuses/115445473024117845"}, {"timestamp": "2025-10-27T09:42:01.780Z", "date_only": false, "value": "2025-10-27T09:42:01.780944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m464v2xbyu2k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "666f74c8-62ad-451d-b812-80eecfb7a606", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3m464v2xbyu2k"}, {"timestamp": "2025-10-27T10:16:12Z", "date_only": false, "value": "2025-10-27T10:16:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sixteen250/88d73deda9d5f616e4c2361aad3befe4", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fe0206f0-5dc9-4b68-91c3-21d5b7b2ee81", "url": "https://gist.github.com/sixteen250/88d73deda9d5f616e4c2361aad3befe4"}, {"timestamp": "2025-10-27T10:42:31.963Z", "date_only": false, "value": "2025-10-27T10:42:31.963856Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m46abarply2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8ab615e3-ad6e-4f19-bbda-77c38b2d41c7", "url": "https://bsky.app/profile/cybersecurity.page/post/3m46abarply2e"}, {"timestamp": "2025-10-27T10:52:55.702Z", "date_only": false, "value": "2025-10-27T10:52:55.702354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/informedclearly.bsky.social/post/3m46atpbhuk2q", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8fbe3c4c-61d5-40e9-9902-3a7f987795d2", "url": "https://bsky.app/profile/informedclearly.bsky.social/post/3m46atpbhuk2q"}, {"timestamp": "2025-10-27T11:00:11Z", "date_only": false, "value": "2025-10-27T11:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AdCIH4IBdyH2RuT-ivCH0fx4sHuIZ_LOR5s8odRzaXRXlU8", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "65fe37d5-1037-433e-b79f-3b739d466bf6"}, {"timestamp": "2025-10-27T11:07:38Z", "date_only": false, "value": "2025-10-27T11:07:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Shrfnt77/c200630069b56b3b7f454d3e6e336e78", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4da47e3d-ac5a-4160-bbaf-8442a2df6de4", "url": "https://gist.github.com/Shrfnt77/c200630069b56b3b7f454d3e6e336e78"}, {"timestamp": "2025-10-27T12:20:07.836Z", "date_only": false, "value": "2025-10-27T12:20:07.836976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m46fprbt732c", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "b53628e7-8c0b-4a23-9656-1ca5610ae41f", "url": "https://bsky.app/profile/cyberhub.blog/post/3m46fprbt732c"}, {"timestamp": "2025-10-27T12:40:07.576Z", "date_only": false, "value": "2025-10-27T12:40:07.576902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m46gtjgro52n", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "cb7912f9-f1ce-4231-9504-b123673b4d6e", "url": "https://bsky.app/profile/cyberhub.blog/post/3m46gtjgro52n"}, {"timestamp": "2025-10-27T12:52:02Z", "date_only": false, "value": "2025-10-27T12:52:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haccking/12357", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1e4fd227-d44a-4baf-ba42-6fd2565e8c08", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows Server Update Service\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows Server Update Service (WSUS), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 proof-of-concept \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2025/10/27/cve-2025-59287/", "url": "https://t.me/haccking/12357"}, {"timestamp": "2025-10-27T13:29:28.415Z", "date_only": false, "value": "2025-10-27T13:29:28.415581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m46jlpwql22q", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "51e33067-5db7-4d32-b55f-95122eef19e8", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m46jlpwql22q"}, {"timestamp": "2025-10-27T13:36:24.052Z", "date_only": false, "value": "2025-10-27T13:36:24.052310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jgreig.bsky.social/post/3m46jy3zgg22x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a5b58eca-51f2-449b-8c7e-fd54fb18b270", "url": "https://bsky.app/profile/jgreig.bsky.social/post/3m46jy3zgg22x"}, {"timestamp": "2025-10-27T13:37:23Z", "date_only": false, "value": "2025-10-27T13:37:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/57164", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fd2ab172-8340-4d03-b9c1-cca16e8e9bce", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure\nURL\uff1ahttps://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57164"}, {"timestamp": "2025-10-27T13:45:20.597Z", "date_only": false, "value": "2025-10-27T13:45:20.597839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3m46ki553id2d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "200fc1ce-64b2-4f5c-8a31-9d02617f11ba", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3m46ki553id2d"}, {"timestamp": "2025-10-27T14:02:58.913Z", "date_only": false, "value": "2025-10-27T14:02:58.913088Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115446499143833307", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "0ef021c2-6f4a-45fa-9018-056383eb163d", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115446499143833307"}, {"timestamp": "2025-10-27T15:00:07Z", "date_only": false, "value": "2025-10-27T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gHA3pPqgIYqaOFfyav4WOSLnHgyQd03aYnJyGl8fZrE5Jmc", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7215275b-4407-4d68-bc88-088873e3d57f"}, {"timestamp": "2025-10-27T15:18:58Z", "date_only": false, "value": "2025-10-27T15:18:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/codeby_sec/9520", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7bf10b42-a5a1-4944-8ace-345401e5f958", "content": "Microsoft \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WSUS (CVE-2025-59287) \u2014 \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 Proof-of-Concept (Poc), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0451\u0442 \u0440\u0435\u0447\u044c, \u2014 CVE-2025-59287 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8). \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 WSUS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0433\u0438\u0433\u0430\u043d\u0442\u043e\u043c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u00ab\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 WSUS, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u043e \u0441\u0435\u0442\u0438. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Windows, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0440\u043e\u043b\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 WSUS.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00bb, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 HawkTrace \u0411\u0430\u0442\u0443\u0445\u0430\u043d\u0430 \u042d\u0440\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u00ab\u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 AuthorizationCookie, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 GetCookie(), \u0433\u0434\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 cookie \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e AES-128-CBC \u0438 \u0437\u0430\u0442\u0435\u043c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 BinaryFormatter \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SYSTEM\u00bb.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u0430\u043c\u0430 Microsoft \u0440\u0430\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 BinaryFormatter \u0434\u043b\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0435\u043d \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f BinaryFormatter \u0431\u044b\u043b\u0430 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0438\u0437 .NET 9 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430.", "url": "https://t.me/codeby_sec/9520"}, {"timestamp": "2025-10-27T15:20:08.958Z", "date_only": false, "value": "2025-10-27T15:20:08.958893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m46prnotbc2z", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "99cb4f69-de2f-4f51-80f2-6eb71f29b918", "url": "https://bsky.app/profile/cyberhub.blog/post/3m46prnotbc2z"}, {"timestamp": "2025-10-27T15:30:29.802Z", "date_only": false, "value": "2025-10-27T15:30:29.802977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3m46qe6h4of2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3e4e6169-e3ca-42ee-a787-21afeb3be2a6", "url": "https://bsky.app/profile/cert-fr.bsky.social/post/3m46qe6h4of2z"}, {"timestamp": "2025-10-27T15:30:31.519Z", "date_only": false, "value": "2025-10-27T15:30:31.519162Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/115446843242263012", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2d63d3bf-3441-47d8-89af-e06cd6ca4f55", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/115446843242263012"}, {"timestamp": "2025-10-27T15:34:09Z", "date_only": false, "value": "2025-10-27T15:34:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57182", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "af545ee8-7df3-4d93-ac9e-a1928627bd31", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aModule PowerShell de r\u00e9ponse \u00e0 l'incident CVE-2025-59287 \u2014 WSUS Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/RadzaRr/WSUSResponder\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57182"}, {"timestamp": "2025-10-27T15:51:23Z", "date_only": false, "value": "2025-10-27T15:51:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/184", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f5bc963a-5139-44af-bbea-641e7169b2bc", "content": "CVE-2025-59287\n\nWSUS Unauthenticated RCE. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie() endpoint, where encrypted cookie data is decrypted using AES-128-CBC and subsequently deserialized through BinaryFormatter without proper type validation, enabling remote code execution with SYSTEM privileges.", "url": "https://t.me/P0x3k_1N73LL1G3NC3/184"}, {"timestamp": "2025-10-27T18:29:56Z", "date_only": false, "value": "2025-10-27T18:29:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57197", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "95a2d12b-8edf-49b5-9fe8-52e95d4d4ade", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aHelps defenders find their WSUS configurations in the wake of CVE-2025-59287\nURL\uff1ahttps://github.com/mubix/Find-WSUS\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57197"}, {"timestamp": "2025-10-27T18:45:54Z", "date_only": false, "value": "2025-10-27T18:45:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://unit42.paloaltonetworks.com/microsoft-cve-2025-59287/", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "02ba75af-cc02-48ca-9150-85eb44876915", "url": "https://unit42.paloaltonetworks.com/microsoft-cve-2025-59287/"}, {"timestamp": "2025-10-27T18:58:06Z", "date_only": false, "value": "2025-10-27T18:58:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ap_security/901", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f025007c-3e5a-48bb-b3de-ab94024967a1", "content": "#infosec\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 WSUS. Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u0440\u0443\u0448\u0430\u0442 \u043e\u0434\u043d\u0438\u043c \u043a\u043b\u0438\u043a\u043e\u043c \ud83d\udccc\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Windows Server Update Services (WSUS). \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2025-59287 \u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC-\u043a\u043e\u0434, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u044b Windows, \u0433\u0434\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0440\u043e\u043b\u044c WSUS Server \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043d\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u043c WSUS-\u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430\u043c \u0432 \u0441\u0435\u0442\u0438 \u2014 \u044d\u0442\u043e\u0442 \u0440\u0435\u0436\u0438\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d.\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows Server: KB5070881 \u0434\u043b\u044f Windows Server 2025, KB5070879 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0438 23H2, KB5070884 \u0434\u043b\u044f 2022, KB5070883 \u0434\u043b\u044f 2019, KB5070882 \u0434\u043b\u044f 2016, \u0430 \u0442\u0430\u043a\u0436\u0435 KB5070886 \u0438 KB5070887 \u0434\u043b\u044f 2012 R2 \u0438 2012.", "url": "https://t.me/ap_security/901"}, {"timestamp": "2025-10-27T20:20:08.031Z", "date_only": false, "value": "2025-10-27T20:20:08.031330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m47ak2wvzp2n", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "926ae8e4-9e29-4e0a-ac58-dfa25a2c677d", "url": "https://bsky.app/profile/cyberhub.blog/post/3m47ak2wvzp2n"}, {"timestamp": "2025-10-27T20:43:59.397Z", "date_only": false, "value": "2025-10-27T20:43:59.397624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3m47buoaogk23", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "763dfd84-3dfb-43db-86e0-dbfabdcb7504", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3m47buoaogk23"}, {"timestamp": "2025-10-27T20:47:53.567Z", "date_only": false, "value": "2025-10-27T20:47:53.567309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3m47c3pptb72m", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "e943e564-c2e8-483b-be87-a25c2ec3dfee", "url": "https://bsky.app/profile/montxt.bsky.social/post/3m47c3pptb72m"}, {"timestamp": "2025-10-27T22:54:55Z", "date_only": false, "value": "2025-10-27T22:54:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://go.theregister.com/feed/www.theregister.com/2025/10/27/microsoft_wsus_attacks_multiple_orgs/", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5358b609-2017-4bb7-87c0-9c2f9b624d51", "url": "https://go.theregister.com/feed/www.theregister.com/2025/10/27/microsoft_wsus_attacks_multiple_orgs/"}, {"timestamp": "2025-10-27T23:25:03.692Z", "date_only": false, "value": "2025-10-27T23:25:03.692422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ericwalz.bsky.social/post/3m47kunybhs24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "78c50335-030a-4aff-b775-197bd9ab4770", "url": "https://bsky.app/profile/ericwalz.bsky.social/post/3m47kunybhs24"}, {"timestamp": "2025-10-27T23:49:16.382Z", "date_only": false, "value": "2025-10-27T23:49:16.382489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3m47m7znu2x26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a2f6fbc0-557e-43ff-b3af-21a997a13902", "url": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3m47m7znu2x26"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "01b1923c-47ca-49cc-908c-ba186fb7279d"}, {"timestamp": "2025-10-28T01:17:59.602Z", "date_only": false, "value": "2025-10-28T01:17:59.602309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mubix.com/post/3m47r6o6fis2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "65e69778-d0ac-4cee-96d4-db7a0df45245", "url": "https://bsky.app/profile/mubix.com/post/3m47r6o6fis2z"}, {"timestamp": "2025-10-28T02:14:20.042Z", "date_only": false, "value": "2025-10-28T02:14:20.042694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m47udgxpf42c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "61df7af6-eac0-463d-8ef5-f693540f4c5f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m47udgxpf42c"}, {"timestamp": "2025-10-28T03:17:51Z", "date_only": false, "value": "2025-10-28T03:17:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Firebasky/ca39284515c2c0accf0c95768fef52dd", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "71c6cfbe-5b1e-46ac-8258-f04e036b1533", "url": "https://gist.github.com/Firebasky/ca39284515c2c0accf0c95768fef52dd"}, {"timestamp": "2025-10-28T03:46:46.525Z", "date_only": false, "value": "2025-10-28T03:46:46.525991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m47zipzbkr23", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "dae4c006-6a40-4e9f-8822-270969ea3385", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m47zipzbkr23"}, {"timestamp": "2025-10-28T03:49:22.323Z", "date_only": false, "value": "2025-10-28T03:49:22.323531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m47zn7k6z22b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c0ddac98-d471-4cb1-a55b-0e7963d1bcc8", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m47zn7k6z22b"}, {"timestamp": "2025-10-28T06:25:08Z", "date_only": false, "value": "2025-10-28T06:25:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/57255", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cc24ae45-e3bc-406e-8e08-7b5c8c7989b8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/mrk336/Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57255"}, {"timestamp": "2025-10-28T07:17:04Z", "date_only": false, "value": "2025-10-28T07:17:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57260", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "64360392-5a01-43c9-a7b4-23e71fc0eba7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udea8 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.\nURL\uff1ahttps://github.com/AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57260"}, {"timestamp": "2025-10-28T07:42:00Z", "date_only": false, "value": "2025-10-28T07:42:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/MustafaNafizDurukan/0b48e52c93c3ff53d4f9d540bf5af2d2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "51eda043-f9b4-47be-8ad7-18dc534d32a4", "url": "https://gist.github.com/MustafaNafizDurukan/0b48e52c93c3ff53d4f9d540bf5af2d2"}, {"timestamp": "2025-10-28T09:00:04Z", "date_only": false, "value": "2025-10-28T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/d-rVDZTUKUG3IYUJ4BAdDnIieq971JGpK_Ia99hM3eRIwok", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e714419a-6c92-4be6-86d8-c9d1925c4cf4"}, {"timestamp": "2025-10-28T09:09:35Z", "date_only": false, "value": "2025-10-28T09:09:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/H4NM/ebe3b141f7b3cedf52b7b900a6265f31", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8befee02-9a1e-4f19-b02a-062aa6237059", "url": "https://gist.github.com/H4NM/ebe3b141f7b3cedf52b7b900a6265f31"}, {"timestamp": "2025-10-28T09:09:48Z", "date_only": false, "value": "2025-10-28T09:09:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/H4NM/c3e0158ba180ae19438ea91ea12998a3", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3be7d0ad-17c8-40ed-bceb-ac7f994c2b09", "url": "https://gist.github.com/H4NM/c3e0158ba180ae19438ea91ea12998a3"}, {"timestamp": "2025-10-28T09:11:55.159Z", "date_only": false, "value": "2025-10-28T09:11:55.159101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techfr.skyfleet.blue/post/3m4alo54dyo24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "60ed9076-c359-46ed-b084-0da773945774", "url": "https://bsky.app/profile/techfr.skyfleet.blue/post/3m4alo54dyo24"}, {"timestamp": "2025-10-28T11:17:46.214Z", "date_only": false, "value": "2025-10-28T11:17:46.214446Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115451511762291736", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "203dc1e0-6085-4032-b85e-705f808c20d6", "url": "https://infosec.exchange/users/dragonjar/statuses/115451511762291736"}, {"timestamp": "2025-10-28T11:49:35.959Z", "date_only": false, "value": "2025-10-28T11:49:35.959252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4aui37w6u24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7de38130-afe9-4b95-bda3-b59a282f28e8", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4aui37w6u24"}, {"timestamp": "2025-10-28T12:44:53.313Z", "date_only": false, "value": "2025-10-28T12:44:53.313811Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ginjfo.bsky.social/post/3m4axktzzvk23", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "97c759b2-43e9-42ec-b7c2-4d5dee5e1486", "url": "https://bsky.app/profile/ginjfo.bsky.social/post/3m4axktzzvk23"}, {"timestamp": "2025-10-28T12:59:03.674Z", "date_only": false, "value": "2025-10-28T12:59:03.674413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4ayec47kc2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "edecbe06-b5ec-46ef-afa4-2560b55f26e8", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4ayec47kc2e"}, {"timestamp": "2025-10-28T13:10:38Z", "date_only": false, "value": "2025-10-28T13:10:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jcran/f484db6cf494e35d975d097b5f36be45", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d7b0becc-1233-4a0c-ac01-f268a492fdb0", "url": "https://gist.github.com/jcran/f484db6cf494e35d975d097b5f36be45"}, {"timestamp": "2025-10-28T13:15:40.207Z", "date_only": false, "value": "2025-10-28T13:15:40.207269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4azbz3bh722", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "23afc823-f32c-4c83-b73e-98674a364c08", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m4azbz3bh722"}, {"timestamp": "2025-10-28T13:49:17.621Z", "date_only": false, "value": "2025-10-28T13:49:17.621988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3m4b36472tm27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6bdb1c16-1c2c-4144-b400-647119b10050", "url": "https://bsky.app/profile/cyberresearch.bsky.social/post/3m4b36472tm27"}, {"timestamp": "2025-10-28T15:42:32.788Z", "date_only": false, "value": "2025-10-28T15:42:32.788670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m4bbin3rtn27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6ee1510c-874d-483e-b521-6da4958d65e9", "url": "https://bsky.app/profile/cybersecurity.page/post/3m4bbin3rtn27"}, {"timestamp": "2025-10-28T17:30:14.435Z", "date_only": false, "value": "2025-10-28T17:30:14.435487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3m4bhj7hyvf2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bf6072cb-e05d-4a13-94d5-3a5e404395f0", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3m4bhj7hyvf2n"}, {"timestamp": "2025-10-28T19:23:29.212Z", "date_only": false, "value": "2025-10-28T19:23:29.212016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m4bntkfyhk2o", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4b173d76-9c40-49d7-aeb2-741870040423", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3m4bntkfyhk2o"}, {"timestamp": "2025-10-28T20:00:26Z", "date_only": false, "value": "2025-10-28T20:00:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57345", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ee0c1d26-bfab-4e2f-9e51-12d042e8d5e9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aGu\u00eda de respuesta r\u00e1pida y script de auditor\u00eda para CVE-2025-59287 (RCE cr\u00edtica en WSUS).\nURL\uff1ahttps://github.com/esteban11121/WSUS-RCE-Mitigation-59287\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57345"}, {"timestamp": "2025-10-28T21:00:05Z", "date_only": false, "value": "2025-10-28T21:00:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/p9aXpoU_FZfvPwaFGC2z6wToIKsj9JEw53i6nfBS-Wl44_8", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "babda92d-97b5-434c-8291-24650847713e"}, {"timestamp": "2025-10-28T21:59:20.161Z", "date_only": false, "value": "2025-10-28T21:59:20.161913Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4bwke66kd25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9d470b40-5ae1-4dd5-821c-46065b9bdf7f", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m4bwke66kd25"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8f26f938-3523-4a8e-bd43-854ccfa5fcdb"}, {"timestamp": "2025-10-29T01:16:21Z", "date_only": false, "value": "2025-10-29T01:16:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/27412", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "91f1f7f5-2ea2-4b44-bcf5-70c776007adc", "content": "\ud83c\udfb9 \u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0432 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c WSUS, \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u043f\u0440\u044f\u0447\u044c\u0441\u044f. \u0421\u0435\u0439\u0447\u0430\u0441 \u0438\u0434\u0435\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows Server Update Services (CVE-2025-59287). \u0412 \u044d\u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f Microsoft \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \"\u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f\", \u043b\u0438\u0448\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043a\u0430\u043a \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0443\u044e.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435, \u043e\u0442 Windows Server 2012 \u0434\u043e 2025, \u0435\u0441\u043b\u0438 \u043d\u0430 \u043d\u0438\u0445 \u043f\u043e\u0434\u043d\u044f\u0442\u0430 \u0440\u043e\u043b\u044c WSUS. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432 \u043f\u043e\u0438\u0441\u043a\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0440\u0443\u0436\u0443 \u0442\u043e\u0440\u0447\u0430\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u043e\u0440\u0442\u044b 8530 \u0438 8531. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043e\u043d\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 PowerShell \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0414\u0430\u043b\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 WSUS \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft, \u0438 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0441 \u0440\u0430\u0434\u043e\u0441\u0442\u044c\u044e \u0435\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u0430, \u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n\ud83d\udc68\u200d\ud83d\udd2c Microsoft \u0443\u043c\u0443\u0434\u0440\u0438\u043b\u0430\u0441\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c, \u0441\u043e\u0437\u0434\u0430\u0432 \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043b\u043e\u0436\u043d\u043e\u0435 \u0447\u0443\u0432\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u0432\u044b\u0448\u0435\u043b \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0430\u043f\u0434\u0435\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u044b\u0440\u0443. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Trend Micro, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 100 000 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0412 \u0441\u0435\u0442\u0438 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0442\u043e\u0440\u0447\u0438\u0442 \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/27412"}, {"timestamp": "2025-10-29T01:55:25.971Z", "date_only": false, "value": "2025-10-29T01:55:25.971776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4cdqkqbvv2r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "39eb05e9-d193-483c-899b-50cfe41fde03", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m4cdqkqbvv2r"}, {"timestamp": "2025-10-29T02:19:23.265Z", "date_only": false, "value": "2025-10-29T02:19:23.265698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4cf3fla3u2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b92b9e4a-eeb3-4862-b215-19d96afeb9a0", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4cf3fla3u2m"}, {"timestamp": "2025-10-29T03:00:06Z", "date_only": false, "value": "2025-10-29T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hHATm5Nrh3ANUywlk7hhmeghL00fcWV_qTKwSJpifsgQxYQ", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "73e0fa11-6681-45a9-b0ee-7b33c6e207a0"}, {"timestamp": "2025-10-29T03:51:34.763Z", "date_only": false, "value": "2025-10-29T03:51:34.763850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberlensnews.bsky.social/post/3m4cka6ndzs2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a3dcab04-0744-43c1-98f2-05397e9477b8", "url": "https://bsky.app/profile/cyberlensnews.bsky.social/post/3m4cka6ndzs2b"}, {"timestamp": "2025-10-29T08:40:08.096Z", "date_only": false, "value": "2025-10-29T08:40:08.096824Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m4d2e7pccm2n", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "9a945381-351f-419f-aa26-e01d50eb8186", "url": "https://bsky.app/profile/cyberhub.blog/post/3m4d2e7pccm2n"}, {"timestamp": "2025-10-29T09:43:18.571Z", "date_only": false, "value": "2025-10-29T09:43:18.571286Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tsfactoryllc.bsky.social/post/3m4d5v5du6c24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "62c011e8-30a5-4d44-88ff-662d9a5041ca", "url": "https://bsky.app/profile/tsfactoryllc.bsky.social/post/3m4d5v5du6c24"}, {"timestamp": "2025-10-29T10:01:47Z", "date_only": false, "value": "2025-10-29T10:01:47.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-59287.yaml", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a2c48b3e-2eb1-46a4-a981-1610313c477e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-59287.yaml"}, {"timestamp": "2025-10-29T10:03:43Z", "date_only": false, "value": "2025-10-29T10:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/29/warnings-mount-over-windows-server.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "782105f4-df0a-48e0-812c-96846af42309", "url": "https://threatintel.cc/2025/10/29/warnings-mount-over-windows-server.html"}, {"timestamp": "2025-10-29T11:03:36.271Z", "date_only": false, "value": "2025-10-29T11:03:36.271707Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115457118432167069", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bd2e4b99-faf2-4923-83a9-0b1a05dcae99", "url": "https://infosec.exchange/users/edwardk/statuses/115457118432167069"}, {"timestamp": "2025-10-29T11:24:59Z", "date_only": false, "value": "2025-10-29T11:24:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/29/top-attacks-and-breaches.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ede347de-159d-491e-b914-09dacb954ba5", "url": "https://threatintel.cc/2025/10/29/top-attacks-and-breaches.html"}, {"timestamp": "2025-10-29T13:05:42.407Z", "date_only": false, "value": "2025-10-29T13:05:42.407303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/codewhitesec.bsky.social/post/3m4dj72nrvc2v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8677537f-ceaf-4e74-9a4d-4dbb0908bb70", "url": "https://bsky.app/profile/codewhitesec.bsky.social/post/3m4dj72nrvc2v"}, {"timestamp": "2025-10-29T14:47:26.869Z", "date_only": false, "value": "2025-10-29T14:47:26.869502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3m4douzhvez22", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "de516aa2-f7ef-445e-92ba-ccae6357724b", "url": "https://bsky.app/profile/redhotcyber.bsky.social/post/3m4douzhvez22"}, {"timestamp": "2025-10-29T20:39:42.060Z", "date_only": false, "value": "2025-10-29T20:39:42.060142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hasamba72.bsky.social/post/3m4eckvoglr2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a1050809-9a8c-4d6a-8eca-9b58490a4e64", "url": "https://bsky.app/profile/hasamba72.bsky.social/post/3m4eckvoglr2m"}, {"timestamp": "2025-10-29T21:00:05Z", "date_only": false, "value": "2025-10-29T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3SEzWsXdf8TByVUaB-OgVj6bLDcmIrVBMSBDXfTff8j0U4c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0e6d7e48-1268-4776-9a8b-617ff9db3a75"}, {"timestamp": "2025-10-29T21:00:16.615Z", "date_only": false, "value": "2025-10-29T21:00:16.615538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sketchynews.net/post/3m4edpormco2j", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "30bd4e5f-bcc8-4b66-a64b-5b56f040e56a", "url": "https://bsky.app/profile/sketchynews.net/post/3m4edpormco2j"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f4c08dd7-4a5d-440c-9720-d476e1b77107"}, {"timestamp": "2025-10-30T02:17:49.282Z", "date_only": false, "value": "2025-10-30T02:17:49.282818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4evhjkaky2v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "14715d3a-84cd-41ae-80c6-1de10c16d43f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4evhjkaky2v"}, {"timestamp": "2025-10-30T05:18:20Z", "date_only": false, "value": "2025-10-30T05:18:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Lerie82/328f5201edfc17c8acb94dea6e4ee0c5", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "401d56c4-82f2-4744-912e-67438fad797e", "url": "https://gist.github.com/Lerie82/328f5201edfc17c8acb94dea6e4ee0c5"}, {"timestamp": "2025-10-30T05:40:10Z", "date_only": false, "value": "2025-10-30T05:40:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shift-f10/1c4b2ee1296fe39f1a50530bf9c39522", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "15ca050a-92f2-4644-b910-5f77e8602943", "url": "https://gist.github.com/shift-f10/1c4b2ee1296fe39f1a50530bf9c39522"}, {"timestamp": "2025-10-30T06:59:58.313Z", "date_only": false, "value": "2025-10-30T06:59:58.313725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4ff7wovrdx2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3fa84cb1-5df7-4472-b57b-31498b9555de", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4ff7wovrdx2"}, {"timestamp": "2025-10-30T10:00:12.202Z", "date_only": false, "value": "2025-10-30T10:00:12.202970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4fpcd633n27", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "57361fd6-5e4f-48d8-a2f5-677890613781", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m4fpcd633n27"}, {"timestamp": "2025-10-30T10:34:06.964Z", "date_only": false, "value": "2025-10-30T10:34:06.964527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3m4fr6womac2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9edcad66-389f-4731-9c0f-efcb8e25c584", "url": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3m4fr6womac2z"}, {"timestamp": "2025-10-30T10:44:36.984Z", "date_only": false, "value": "2025-10-30T10:44:36.984999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4frqfk4tcf2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dafab6af-5fd2-4876-beeb-857ce7ca4795", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4frqfk4tcf2"}, {"timestamp": "2025-10-30T13:39:58.816Z", "date_only": false, "value": "2025-10-30T13:39:58.816216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3m4g3lcqmgu27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b73d8d83-2110-413e-916b-90d87f004c13", "url": "https://bsky.app/profile/buherator.bsky.social/post/3m4g3lcqmgu27"}, {"timestamp": "2025-10-30T13:40:51Z", "date_only": false, "value": "2025-10-30T13:40:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57580", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b743c87c-f424-4e93-ae62-95b54e6394ee", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-59287  \u6ce8\u5165WolfShell\u5185\u5b58\u9a6c\nURL\uff1ahttps://github.com/0x7556/CVE-2025-59287\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57580"}, {"timestamp": "2025-10-30T14:05:06.303Z", "date_only": false, "value": "2025-10-30T14:05:06.303868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Reverse-Engineering.activitypub.awakari.com.ap.brid.gy/post/3m4g4uia42v32", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4cad09e2-a457-42d5-9e77-d42aa5cad143", "url": "https://bsky.app/profile/Reverse-Engineering.activitypub.awakari.com.ap.brid.gy/post/3m4g4uia42v32"}, {"timestamp": "2025-10-30T14:47:15.196Z", "date_only": false, "value": "2025-10-30T14:47:15.196906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3m4g7dgh6hk2l", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3627a954-4f19-4f6f-956f-e19f68f5d3a4", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3m4g7dgh6hk2l"}, {"timestamp": "2025-10-30T14:52:54.445Z", "date_only": false, "value": "2025-10-30T14:52:54.445648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4g7npt3dv27", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "082fb4da-f796-4e0c-ac14-7c7f238f8106", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4g7npt3dv27"}, {"timestamp": "2025-10-30T15:49:59.868Z", "date_only": false, "value": "2025-10-30T15:49:59.868956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3m4gctmwqo22p", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "60d158ff-a63a-43be-8220-6cbe15e1d33c", "url": "https://bsky.app/profile/socprime.com/post/3m4gctmwqo22p"}, {"timestamp": "2025-10-30T19:15:11.770Z", "date_only": false, "value": "2025-10-30T19:15:11.770618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/systemcenterdudes.com/post/3m4gocphii22r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "aaeda963-146c-4a6f-bfa3-ff594eb4c0d6", "url": "https://bsky.app/profile/systemcenterdudes.com/post/3m4gocphii22r"}, {"timestamp": "2025-10-30T21:00:05Z", "date_only": false, "value": "2025-10-30T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LpWnWdO-d-KFD5Eo7ih0GDeS8ihqeBrhVafYzkY74gccSdU", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "86f6cd36-c08f-41d7-b958-716e09238fa2"}, {"timestamp": "2025-10-30T22:12:58.911Z", "date_only": false, "value": "2025-10-30T22:12:58.911252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4gyamxlbt2r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2d393f24-f3a8-4ca0-bbb8-a08974284a6d", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m4gyamxlbt2r"}, {"timestamp": "2025-10-30T22:40:36.122Z", "date_only": false, "value": "2025-10-30T22:40:36.122360Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/115465521283494347", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "ee63bc4a-0f0c-4126-9c45-cc517749002f", "url": "https://social.tchncs.de/users/gborn/statuses/115465521283494347"}, {"timestamp": "2025-10-30T22:41:20.385Z", "date_only": false, "value": "2025-10-30T22:41:20.385791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m4gztckvqf2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "640cf1e1-ac00-4e25-a945-4e616e867b32", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m4gztckvqf2n"}, {"timestamp": "2025-10-30T22:41:27.466Z", "date_only": false, "value": "2025-10-30T22:41:27.466160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3m4gztjfzc22x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a556dc19-4cfb-4f49-bf46-494d78912979", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3m4gztjfzc22x"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": true, "value": "2025-10-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-26108", "record": "CNVD-2025-26108", "field": "openTime"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e3080111-0059-4191-bd82-9c5d9d0b852d"}, {"timestamp": "2025-10-31T02:16:11.847Z", "date_only": false, "value": "2025-10-31T02:16:11.847791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4hftjwhge2s", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "17ab88b7-e10f-441e-8c72-8eeeeb73d44b", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4hftjwhge2s"}, {"timestamp": "2025-10-31T03:08:26.965Z", "date_only": false, "value": "2025-10-31T03:08:26.965397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3m4hiqxazeq2a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2b774ace-292c-4176-b908-98ea65567f9a", "url": "https://bsky.app/profile/opsmatters.com/post/3m4hiqxazeq2a"}, {"timestamp": "2025-10-31T08:55:11Z", "date_only": false, "value": "2025-10-31T08:55:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7820", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "57659276-ef9a-4a97-b4d7-11800230065e", "content": "CISA and NSA just issued a warning:\n\nExchange servers are still getting hacked. Now a new WSUS flaw (CVE-2025-59287) lets attackers run code remotely.\n\nEven patched systems aren\u2019t fully safe.\n\nIf you manage Exchange or WSUS, read this \u2193 https://thehackernews.com/2025/10/cisa-and-nsa-issue-urgent-guidance-to.html", "url": "https://t.me/thehackernews/7820"}, {"timestamp": "2025-10-31T09:10:05.585Z", "date_only": false, "value": "2025-10-31T09:10:05.585616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/115467996707436477", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1008472b-df11-4793-a40d-e7e8aa3b4c0e", "url": "https://infosec.exchange/users/tomcat/statuses/115467996707436477"}, {"timestamp": "2025-10-31T10:14:39.414Z", "date_only": false, "value": "2025-10-31T10:14:39.414823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4ial3ckdk25", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e80de5e7-b541-43a3-85e9-6be8f6cd376e", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4ial3ckdk25"}, {"timestamp": "2025-10-31T11:22:52Z", "date_only": false, "value": "2025-10-31T11:22:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/31/top-attacks-and-breaches.html", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "fca03b50-4869-4348-a6da-cdbe7f15a9fe", "url": "https://threatintel.cc/2025/10/31/top-attacks-and-breaches.html"}, {"timestamp": "2025-10-31T12:48:41.827Z", "date_only": false, "value": "2025-10-31T12:48:41.827069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3m4ij6ijesk22", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "63089cd7-2f77-4071-8aa6-2249ba903c93", "url": "https://bsky.app/profile/hackread.bsky.social/post/3m4ij6ijesk22"}, {"timestamp": "2025-10-31T15:16:15.725Z", "date_only": false, "value": "2025-10-31T15:16:15.725764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3m4irgfc2gp26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "267057e2-2cd0-4e64-818c-2489e8b161d6", "url": "https://bsky.app/profile/idenhaus.bsky.social/post/3m4irgfc2gp26"}, {"timestamp": "2025-10-31T18:12:04.221Z", "date_only": false, "value": "2025-10-31T18:12:04.221160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4j3ar37q42h", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b7e1fe17-7449-4714-9c6e-76d9732c841f", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4j3ar37q42h"}, {"timestamp": "2025-10-31T20:24:33Z", "date_only": false, "value": "2025-10-31T20:24:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57755", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7441f233-1b45-4c11-a656-44f8d7975b3d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-59287\nURL\uff1ahttps://github.com/0xBruno/WSUSploit.NET\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57755"}, {"timestamp": "2025-11-01T20:37:17Z", "date_only": false, "value": "2025-11-01T20:37:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/57887", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3241ac29-3881-4005-a5d2-8f4fb1b4eac3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udc19 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.\nURL\uff1ahttps://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/57887"}, {"timestamp": "2025-11-02T02:20:40.860Z", "date_only": false, "value": "2025-11-02T02:20:40.860353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4mgzfkazg2o", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bed51896-d240-476a-b299-e8329e44947c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4mgzfkazg2o"}, {"timestamp": "2025-11-02T03:00:06Z", "date_only": false, "value": "2025-11-02T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OZ23IKbQ47oGvBTE7eizQgpIhDfJ5XALPOlUhm63kbbFXAA", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "eee17848-f4aa-45f5-9eff-b86af21e62c5"}, {"timestamp": "2025-11-02T08:55:11Z", "date_only": false, "value": "2025-11-02T08:55:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/badbclubua/453", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d2f65660-39eb-4a91-be65-7f0c2ad83e90", "content": "\u041d\u0435\u043c\u043d\u043e\u0433\u043e \u0441 \u043e\u043f\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c:\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0441\u043a\u0430\u044f RCE \u0432 WSUS. \u041f\u043e\u0447\u0435\u043c\u0443 \u0441 \u043e\u043f\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c: \u043f\u0438\u0434\u0430\u0440\u0441\u043a\u0438\u0435 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u043c\u0435\u043d\u044f \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u043a\u0430\u043a \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0432\u0440\u0430\u0433\u0430 \u0432\u0435\u043b\u0438\u043a\u043e\u0439 \u0438 \u043c\u043e\u0433\u0443\u0447\u0435\u0439 \u043f\u0438\u0434\u0430\u0440\u0434\u0435\u0440\u0436\u0430\u0432\u044b, \u0438 \u0445\u043e\u0442\u044f \u043e\u0431 \u044d\u0442\u043e\u043c \u0431\u0430\u0433\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0435\u0449\u0435 \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434, \u044f \u043d\u0435 \u043c\u043e\u0433 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u0432 \u0443\u0434\u043e\u0432\u043e\u043b\u044c\u0441\u0442\u0432\u0438\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043e\u0441\u043d\u043e\u0448\u0430\u0442\u044c \u0440\u0443\u0441\u0430\u043a\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 wsus, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0434\u0432\u0430 \u043b\u0438 \u043d\u0435 \u043d\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0441\u043a\u0430\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u044e\u0449\u0438\u0435 \u0442\u0430\u0437\u0438\u043a\u0438 \u0441 XP/7/8, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0438 10 \ud83d\ude11\n\n\u0420\u0430\u0439\u0442\u0430\u043f \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u043e\u0432:\n\nhttps://hawktrace.com/blog/CVE-2025-59287", "url": "https://t.me/badbclubua/453"}, {"timestamp": "2025-11-02T10:32:15.702Z", "date_only": false, "value": "2025-11-02T10:32:15.702175Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/spuluka.bsky.social/post/3m4ncif3jrk2b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ef3f0973-2f24-4368-84d6-7cdd7e3291f2", "url": "https://bsky.app/profile/spuluka.bsky.social/post/3m4ncif3jrk2b"}, {"timestamp": "2025-11-02T17:55:40.111Z", "date_only": false, "value": "2025-11-02T17:55:40.111533Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3m4o3bbjud52t", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a74957ae-b449-484c-95ad-3168f1fb838d", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3m4o3bbjud52t"}, {"timestamp": "2025-11-02T19:41:32.326Z", "date_only": false, "value": "2025-11-02T19:41:32.326732Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115481804262135097", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "136230ca-5bb2-4035-a9bb-07f7dbfbe311", "url": "https://infosec.exchange/users/threatcodex/statuses/115481804262135097"}, {"timestamp": "2025-11-02T21:00:04Z", "date_only": false, "value": "2025-11-02T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Cc3RAhYJWNXqdPWhmRP1dh2hUmKqdVrmSjRxwS70kfXOl1k", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e5680438-0234-47f6-8e47-08abe2b906c0"}, {"timestamp": "2025-11-03T02:20:06.788Z", "date_only": false, "value": "2025-11-03T02:20:06.788664Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4oxha5gkk2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "61b70d4f-15dc-45d0-ac31-7fc339efde3c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4oxha5gkk2m"}, {"timestamp": "2025-11-03T10:54:26Z", "date_only": false, "value": "2025-11-03T10:54:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/58099", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8165dc65-2d78-4149-802b-879ce460aea9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploitation proof-of-concept against CVE-2025-12428 for Chromium V8 JavaScript issues like type confusion\nURL\uff1ahttps://github.com/dexterm300/cve-2025-59287-exploit-poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/58099"}, {"timestamp": "2025-11-03T11:37:48Z", "date_only": false, "value": "2025-11-03T11:37:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/11/03/scans-for-port-tcp.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f93c5469-b816-4acc-a0d4-59ccb256c50f", "url": "https://threatintel.cc/2025/11/03/scans-for-port-tcp.html"}, {"timestamp": "2025-11-03T12:37:36.370Z", "date_only": false, "value": "2025-11-03T12:37:36.370167Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115485799614125781", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c76c2288-6bf8-4dd8-bd76-d35043a22c3b", "url": "https://infosec.exchange/users/edwardk/statuses/115485799614125781"}, {"timestamp": "2025-11-03T14:31:13.039Z", "date_only": false, "value": "2025-11-03T14:31:13.039863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3m4qacisqec2x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c3f4c604-e85e-441e-8201-237fb3e01fd6", "url": "https://bsky.app/profile/samilaiho.com/post/3m4qacisqec2x"}, {"timestamp": "2025-11-03T15:21:46.051Z", "date_only": false, "value": "2025-11-03T15:21:46.051705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qd2jcx6ho2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "99f26f10-0b42-47b3-b92e-c47ba0d7cb01", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qd2jcx6ho2"}, {"timestamp": "2025-11-03T16:04:03Z", "date_only": false, "value": "2025-11-03T16:04:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/6368", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3fd6d226-da3d-4f7b-9624-26a3f60719e5", "content": "Hackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287 \u2013 gbhackers.com\n\nMon, 03 Nov 2025 22:00:42", "url": "https://t.me/TengkorakCyberCrewzz/6368"}, {"timestamp": "2025-11-03T16:28:03.917Z", "date_only": false, "value": "2025-11-03T16:28:03.917625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4qgtjygf52m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "05cd4560-fe91-4346-bc59-bf6cf4bef250", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4qgtjygf52m"}, {"timestamp": "2025-11-03T17:21:53Z", "date_only": false, "value": "2025-11-03T17:21:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bobby-tablez/20fcaa32ec4bcec0c7c6a5bc2b12f371", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8d54a255-9d71-4d15-b178-cb80ed1f7403", "url": "https://gist.github.com/bobby-tablez/20fcaa32ec4bcec0c7c6a5bc2b12f371"}, {"timestamp": "2025-11-03T17:51:48Z", "date_only": false, "value": "2025-11-03T17:51:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/54392", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4d0e1229-d759-4b13-8239-6f84af26a082", "content": "Recent Vulnerabilities in Redis Server\u2019s Lua Scripting Engine\nhttps://www.offsec.com/blog/recent-vulnerabilities-in-redis-servers-lua-scripting-engine-2/\n\nCVE-2025-59287 exposes a critical WSUS deserialization flaw enabling unauthenticated remote code execution via unsafe AuthorizationCookie handling. Learn the risks and fixes.\nThe post Recent Vulnerabilities in Redis Server\u2019s Lua Scripting Engine (https://www.offsec.com/blog/recent-vulnerabilities-in-redis-servers-lua-scripting-engine-2/) appeared first on OffSec (https://www.offsec.com/).", "url": "https://t.me/information_security_channel/54392"}, {"timestamp": "2025-11-03T18:17:29.408Z", "date_only": false, "value": "2025-11-03T18:17:29.408214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4qmx74er225", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "88e3c583-c102-474b-a4df-a46c1804a31a", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4qmx74er225"}, {"timestamp": "2025-11-03T18:58:53.707Z", "date_only": false, "value": "2025-11-03T18:58:53.707420Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3m4qpbaj3se26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8034da0a-fd53-46f8-a912-1e63d23e25b9", "url": "https://bsky.app/profile/technology-news.bsky.social/post/3m4qpbaj3se26"}, {"timestamp": "2025-11-03T21:00:05Z", "date_only": false, "value": "2025-11-03T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Yp3C-g9WS62hER3jj74l0wa8pKRFQDsZGepuE2AQ-mTAkbM", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c70b83bd-ac05-48e6-bc72-8434bc6c5016"}, {"timestamp": "2025-11-03T21:29:38.574Z", "date_only": false, "value": "2025-11-03T21:29:38.574785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4qxot2ws32d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2ecb77c7-27f2-434c-a292-fdec3ff3a527", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4qxot2ws32d"}, {"timestamp": "2025-11-04T00:58:47.287Z", "date_only": false, "value": "2025-11-04T00:58:47.287215Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m4rdesedyn2s", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "3a7263c5-6f5d-4f33-a136-cb9d8a75129b", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m4rdesedyn2s"}, {"timestamp": "2025-11-04T01:44:56Z", "date_only": false, "value": "2025-11-04T01:44:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/kenyon-wong/507744c4b31db6409da8fc21f602e827", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "79fb7c49-3616-4692-871c-5e76630931c5", "url": "https://gist.github.com/kenyon-wong/507744c4b31db6409da8fc21f602e827"}, {"timestamp": "2025-11-04T02:16:16.354Z", "date_only": false, "value": "2025-11-04T02:16:16.354967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4rhpdyiej2h", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "81a31f8d-eb0a-4547-880d-8d543bb0e0ed", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4rhpdyiej2h"}, {"timestamp": "2025-11-04T04:20:07.932Z", "date_only": false, "value": "2025-11-04T04:20:07.932972Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4romsnvie2i", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d252c769-b61e-4a32-8ae4-2cd87b6593c1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4romsnvie2i"}, {"timestamp": "2025-11-04T04:45:19.956Z", "date_only": false, "value": "2025-11-04T04:45:19.956049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4rpzknhgjx2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3924acbf-e9f3-4336-9661-180f74dd7251", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4rpzknhgjx2"}, {"timestamp": "2025-11-04T06:31:41.622Z", "date_only": false, "value": "2025-11-04T06:31:41.622886Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-aba14261-a4bc8e1fc1eced92", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "56355c49-4d56-4f54-8e59-f1151b3a8df5", "url": "https://poliverso.org/objects/0477a01e-aba14261-a4bc8e1fc1eced92"}, {"timestamp": "2025-11-04T07:16:08Z", "date_only": false, "value": "2025-11-04T07:16:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Narete/a324dafef595c7da9f24342155bfdd56", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "77f8db49-3cd1-482f-9c90-063d0fadddd2", "url": "https://gist.github.com/Narete/a324dafef595c7da9f24342155bfdd56"}, {"timestamp": "2025-11-04T08:49:22.752Z", "date_only": false, "value": "2025-11-04T08:49:22.752680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bigearthdata.bsky.social/post/3m4s5obsmrr2x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "528be3e6-8ce2-4b5a-a6ae-255a7083346c", "url": "https://bsky.app/profile/bigearthdata.bsky.social/post/3m4s5obsmrr2x"}, {"timestamp": "2025-11-04T19:20:30.073Z", "date_only": false, "value": "2025-11-04T19:20:30.073005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jfreeg.bsky.social/post/3m4tawsk62z26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c53c421b-0280-47e5-bfc6-4e572b7dfb9e", "url": "https://bsky.app/profile/jfreeg.bsky.social/post/3m4tawsk62z26"}, {"timestamp": "2025-11-04T21:00:05Z", "date_only": false, "value": "2025-11-04T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WrQaMTevy7WSUORikUxdrSPBs99wZo-jtxg57p3kMuQ3eM0", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a3202b9e-6246-40db-bf7f-59ab49801559"}, {"timestamp": "2025-11-04T21:26:06.546Z", "date_only": false, "value": "2025-11-04T21:26:06.546166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4thx3ayjs2w", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "da5a416d-2ccf-4ed3-8c10-0f7476f36553", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4thx3ayjs2w"}, {"timestamp": "2025-11-04T21:28:11.084Z", "date_only": false, "value": "2025-11-04T21:28:11.084835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4ti2s6d222w", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8a41072e-b583-4be6-a813-6c5e8182d751", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4ti2s6d222w"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "37f502b9-2d51-4ec5-96dd-790c435ac79a"}, {"timestamp": "2025-11-05T02:17:58.440Z", "date_only": false, "value": "2025-11-05T02:17:58.440643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4tybciqzf2g", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "983bd342-2ec1-4fb4-a182-df382427e6ed", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4tybciqzf2g"}, {"timestamp": "2025-11-05T04:21:06.027Z", "date_only": false, "value": "2025-11-05T04:21:06.027966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m4u753gbwc2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9688139f-fecc-4ace-be4b-70ad10223b02", "url": "https://bsky.app/profile/shiojiri.com/post/3m4u753gbwc2e"}, {"timestamp": "2025-11-05T16:57:04.344Z", "date_only": false, "value": "2025-11-05T16:57:04.344559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4vjfagfxv2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6ca19b70-12b6-4689-9dfe-09f182f91218", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4vjfagfxv2z"}, {"timestamp": "2025-11-05T23:00:00Z", "date_only": false, "value": "2025-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c046c746-0f90-4dc7-aff7-104badfc25d1"}, {"timestamp": "2025-11-06T11:12:44Z", "date_only": false, "value": "2025-11-06T11:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/58540", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cb9ba72b-832b-4390-9bde-4bec5dbf32df", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-59287 WSUS RCE Exploit\nURL\uff1ahttps://github.com/crondenice/CVE-2025-59287\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/58540"}, {"timestamp": "2025-11-06T15:00:06Z", "date_only": false, "value": "2025-11-06T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5CPDoGea4VxlGpUWdnippgkEikQaqjZZ0eR1kfQrZYnd55E", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "75073cbb-5e5e-44d1-9ba7-9763be885a85"}, {"timestamp": "2025-11-06T16:09:31.976Z", "date_only": false, "value": "2025-11-06T16:09:31.976815Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3m4xx76pghn2x", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d65ec260-b7a0-4625-acd9-2776cd8165f0", "url": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3m4xx76pghn2x"}, {"timestamp": "2025-11-06T21:54:32.449Z", "date_only": false, "value": "2025-11-06T21:54:32.449711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-purpleteamsec.bsky.social/post/3m4yki44p4u2f", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "672844a8-9d04-49ff-aaf9-1c39640fe9d8", "url": "https://bsky.app/profile/r-purpleteamsec.bsky.social/post/3m4yki44p4u2f"}, {"timestamp": "2025-11-07T12:04:42Z", "date_only": false, "value": "2025-11-07T12:04:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/simokohonen/eb854a1628509138bc4cd8992833a4d3", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a38f0901-dbca-4289-b460-d8a5954c3a10", "url": "https://gist.github.com/simokohonen/eb854a1628509138bc4cd8992833a4d3"}, {"timestamp": "2025-11-10T22:12:55Z", "date_only": false, "value": "2025-11-10T22:12:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59165", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "aecfced9-7c79-4db2-809e-4fbc79e7e6fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aComprehensive Proof of Concept collection for CVE-2025-11953, CVE-2025-59287, CVE-2025-8941 with exploitation frameworks in Python, C, Bash, PowerShell\nURL\uff1ahttps://github.com/N3k0t-dev/PoC-CVE-collection\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/59165"}, {"timestamp": "2025-11-11T03:00:07Z", "date_only": false, "value": "2025-11-11T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7SN-z5difEiZToLpXcuc9ccLsruf9-tgqLjvxvRXkd8FUr0", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fe6f2c11-52d4-4a7e-bedf-868a0bdf2ddf"}, {"timestamp": "2025-11-11T15:00:23.270Z", "date_only": false, "value": "2025-11-11T15:00:23.270Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-59287", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-11T15:31:20Z", "date_only": false, "value": "2025-11-11T15:31:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-943J-4893-6RFQ", "record": "GHSA-943J-4893-6RFQ", "field": "modified"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1f2807fc-d5b9-4cc5-bd03-7b48eb478d2e"}, {"timestamp": "2025-11-12T11:50:09Z", "date_only": false, "value": "2025-11-12T11:50:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/wsus_deserialization_rce.rb", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f50d164d-34d0-44e5-bdd3-76c51468e7d4", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/wsus_deserialization_rce.rb"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f40d7b2f-08ea-4ce7-b557-a8c5cf1cfc30"}, {"timestamp": "2025-11-13T21:02:38.317Z", "date_only": false, "value": "2025-11-13T21:02:38.317377Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m5k2tmuixy2f", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "802295ed-0e51-40ea-8bac-5d224c98a60c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m5k2tmuixy2f"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": true, "value": "2025-11-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "evidence.0.details.due_date", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5a4a144b-6386-49d8-b5ad-e98e14f9bbff"}, {"timestamp": "2025-11-14T14:15:16.864Z", "date_only": false, "value": "2025-11-14T14:15:16.864855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3m5lukafbtd2v", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "41f80509-29c6-469e-86c7-07a4e6bcca6d", "url": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3m5lukafbtd2v"}, {"timestamp": "2025-11-16T08:38:10Z", "date_only": false, "value": "2025-11-16T08:38:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59881", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "790b6e22-2b6b-46ba-b833-8f14f3d3e148", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aUnauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317\nURL\uff1ahttps://github.com/M507/CVE-2025-59287-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/59881"}, {"timestamp": "2025-11-16T15:00:07Z", "date_only": false, "value": "2025-11-16T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ns295Xx0Xp8KaiaZ06G73Mj8cXFKczW4UsqP7II1El4numc", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fa2a0230-74ed-43ad-92db-94279ddd1fa6"}, {"timestamp": "2025-11-17T00:00:00Z", "date_only": false, "value": "2025-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "73b5f647-fb17-4011-b4aa-e0b36060e457"}, {"timestamp": "2025-11-17T20:40:29.636Z", "date_only": false, "value": "2025-11-17T20:40:29.636637Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3m5u3ht3wgu2r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f10aeed5-ece3-45c6-96c1-3dd12ae22beb", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3m5u3ht3wgu2r"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e84e2000-8afc-4df2-ab72-986226d2f891"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-18)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a0472bb3-3e7b-4f2f-b351-de48ef563bdd"}, {"timestamp": "2025-11-18T04:27:23.243Z", "date_only": false, "value": "2025-11-18T04:27:23.243346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3m5uvkouftq2s", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f35d51b7-2cd0-42b3-9822-ac85fd2ef186", "url": "https://bsky.app/profile/opsmatters.com/post/3m5uvkouftq2s"}, {"timestamp": "2025-11-19T00:00:00Z", "date_only": false, "value": "2025-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9de0c7b1-05e9-42e6-9151-41264ed64c1e"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "588ecb5e-bd88-4a43-8f48-8cb5a99fd030"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ee17fcab-fb51-4b5c-91e0-d46116e5b824"}, {"timestamp": "2025-11-20T12:56:15.754Z", "date_only": false, "value": "2025-11-20T12:56:15.754956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3m62swfkbns2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "271d35cd-4e95-4685-90b6-3cbd209a0c2d", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3m62swfkbns2m"}, {"timestamp": "2025-11-21T00:00:00Z", "date_only": false, "value": "2025-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-21)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f6b159e1-b507-4510-a5a3-a54656b458fe"}, {"timestamp": "2025-11-21T03:43:49.561Z", "date_only": false, "value": "2025-11-21T03:43:49.561283Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m64ejkc4662s", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a832a178-681c-445b-a871-f5974626439c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m64ejkc4662s"}, {"timestamp": "2025-11-21T07:24:33.313Z", "date_only": false, "value": "2025-11-21T07:24:33.313102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m64quaiixo2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ab3b61d5-b0c9-46d0-a638-88278b003c50", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m64quaiixo2e"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1cbbe881-07a9-49bb-b416-cbb1788f21b8"}, {"timestamp": "2025-11-23T02:08:45.487Z", "date_only": false, "value": "2025-11-23T02:08:45.487217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6ba5drjck2r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8853d3d4-b07b-4db7-bd14-65d727a09196", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6ba5drjck2r"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6f8b89a8-9146-421b-a0d9-480b766f49f0"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "93c193b1-2d0c-4162-b037-e984c11d6846"}, {"timestamp": "2025-11-24T06:18:00Z", "date_only": false, "value": "2025-11-24T06:18:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/11/shadowpad-malware-actively-exploits.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3a9951b8-9777-49af-9b9e-24ce4a74d373", "url": "https://thehackernews.com/2025/11/shadowpad-malware-actively-exploits.html"}, {"timestamp": "2025-11-24T07:22:20Z", "date_only": false, "value": "2025-11-24T07:22:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7952", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f977de2d-b757-4a6c-8d56-00cc20fa085d", "content": "\ud83d\udea8 Hackers are using a fixed Windows bug (CVE-2025-59287) to spread ShadowPad malware through WSUS servers.\n\nThey used normal Windows tools like curl and certutil to install it \u2014 a method seen before in Chinese hacking groups.\n\nSystems patched too late may have already been compromised.\n\nFull story \u2193 https://thehackernews.com/2025/11/shadowpad-malware-actively-exploits.html", "url": "https://t.me/thehackernews/7952"}, {"timestamp": "2025-11-24T08:32:57.338Z", "date_only": false, "value": "2025-11-24T08:32:57.338739Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3m6eg3d7lbh2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "900ac2d7-fc4a-4ca8-9855-6d4c020df66b", "url": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3m6eg3d7lbh2z"}, {"timestamp": "2025-11-24T10:42:12.061Z", "date_only": false, "value": "2025-11-24T10:42:12.061275Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/115604254246849223", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "def5b883-a09c-4899-b442-bb25be16ef6a", "url": "https://infosec.exchange/users/tomcat/statuses/115604254246849223"}, {"timestamp": "2025-11-24T11:14:28Z", "date_only": false, "value": "2025-11-24T11:14:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/9fZZmGJUVF8u5keQ78s5e6fJfDNSZZs1VqDRAvRZldYxJQ", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b74a90e0-60d8-418c-a8a2-47c689f4a994"}, {"timestamp": "2025-11-24T11:17:32.697Z", "date_only": false, "value": "2025-11-24T11:17:32.697486Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/115604393251507036", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b746532a-0bfb-4509-abdf-a9b35b10114d", "url": "https://infosec.exchange/users/technadu/statuses/115604393251507036"}, {"timestamp": "2025-11-24T11:18:38.435Z", "date_only": false, "value": "2025-11-24T11:18:38.435988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3m6epddg7wc2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c9251659-69b3-412a-a0e8-8e98efee1c46", "url": "https://bsky.app/profile/technadu.com/post/3m6epddg7wc2e"}, {"timestamp": "2025-11-24T11:21:40.055Z", "date_only": false, "value": "2025-11-24T11:21:40.055556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m6epiykaim26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6b6956db-1fef-4cf4-8ed3-3c79365cf583", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m6epiykaim26"}, {"timestamp": "2025-11-24T11:24:38.025Z", "date_only": false, "value": "2025-11-24T11:24:38.025259Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackmanac.com/post/3m6epoci5gh2j", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "64f689f4-d5fd-46a4-90e6-000255f8f973", "url": "https://bsky.app/profile/hackmanac.com/post/3m6epoci5gh2j"}, {"timestamp": "2025-11-24T13:33:09.791Z", "date_only": false, "value": "2025-11-24T13:33:09.791537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m6ewu3xyyo2m", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2931b977-8189-4423-bb2c-fbdb0166db9f", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m6ewu3xyyo2m"}, {"timestamp": "2025-11-24T14:30:12.078Z", "date_only": false, "value": "2025-11-24T14:30:12.078315Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115605150868806663", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "42b93ccd-1774-4591-b8e0-be301d694756", "url": "https://infosec.exchange/users/threatcodex/statuses/115605150868806663"}, {"timestamp": "2025-11-24T15:00:53.441Z", "date_only": false, "value": "2025-11-24T15:00:53.441459Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115605271490304952", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ed00aaa3-0cfb-49ca-b6e9-53f2c3582ea6", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115605271490304952"}, {"timestamp": "2025-11-24T15:01:21.528Z", "date_only": false, "value": "2025-11-24T15:01:21.528351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m6f3rtzpka2f", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "728eae36-fb49-4fa4-9788-9cf29154944d", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3m6f3rtzpka2f"}, {"timestamp": "2025-11-24T16:58:26.967Z", "date_only": false, "value": "2025-11-24T16:58:26.967723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m6fcd7tedd24", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9d579065-4b00-4cd4-9c0f-6eba73f8b8bc", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m6fcd7tedd24"}, {"timestamp": "2025-11-24T17:00:32.408Z", "date_only": false, "value": "2025-11-24T17:00:32.408079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3m6fcgx45xe2s", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d9364e8a-0dff-45a7-878f-694906787e51", "url": "https://bsky.app/profile/calimegai.bsky.social/post/3m6fcgx45xe2s"}, {"timestamp": "2025-11-24T17:06:14.482Z", "date_only": false, "value": "2025-11-24T17:06:14.482540Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m6fcr5ag6v2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ff8b57a0-f20c-4d7f-a716-59b196e881fe", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m6fcr5ag6v2e"}, {"timestamp": "2025-11-24T17:06:23.494Z", "date_only": false, "value": "2025-11-24T17:06:23.494143Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m6fcrfkqr42h", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0be97e99-9f02-4371-8f2c-f28e1d1ecf5c", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m6fcrfkqr42h"}, {"timestamp": "2025-11-24T19:04:22.621Z", "date_only": false, "value": "2025-11-24T19:04:22.621304Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-2a3b3f01-882753ea04cfef6e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "844708f3-ceef-4661-9c3d-9234796c12b7", "url": "https://poliverso.org/objects/0477a01e-2a3b3f01-882753ea04cfef6e"}, {"timestamp": "2025-11-24T23:19:04.127Z", "date_only": false, "value": "2025-11-24T23:19:04.127790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3m6fxgsfhwgn2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b76e354f-5ec3-4026-b869-f379e5233e56", "url": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3m6fxgsfhwgn2"}, {"timestamp": "2025-11-25T02:18:34.317Z", "date_only": false, "value": "2025-11-25T02:18:34.317631Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m6gbmrtayq2y", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ae3e58ad-f983-4835-b330-c11ccd67af4a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m6gbmrtayq2y"}, {"timestamp": "2025-11-25T05:34:05.810Z", "date_only": false, "value": "2025-11-25T05:34:05.810307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m6gmkfnb3c2t", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a7df905b-918e-446c-a1b6-672bb10c95d1", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m6gmkfnb3c2t"}, {"timestamp": "2025-11-25T11:50:48Z", "date_only": false, "value": "2025-11-25T11:50:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/11/25/shadowpad-malware-actively-exploits-wsus.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d56f153d-d6bf-4615-86a1-794d0b5f0626", "url": "https://threatintel.cc/2025/11/25/shadowpad-malware-actively-exploits-wsus.html"}, {"timestamp": "2025-11-25T12:50:36.925Z", "date_only": false, "value": "2025-11-25T12:50:36.925467Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115610421595691319", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e81a2aba-b810-4d80-8f79-366bfd536f7b", "url": "https://infosec.exchange/users/edwardk/statuses/115610421595691319"}, {"timestamp": "2025-11-25T13:43:15.547Z", "date_only": false, "value": "2025-11-25T13:43:15.547665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6hhuzfb522b", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d9c7ef11-95e6-4691-bbbb-6a3b088daee6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6hhuzfb522b"}, {"timestamp": "2025-11-25T17:17:04.450Z", "date_only": false, "value": "2025-11-25T17:17:04.450104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m6httghjfp2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d8ba619c-5872-491c-a8e8-9aa73954b007", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m6httghjfp2e"}, {"timestamp": "2025-11-25T23:00:00Z", "date_only": false, "value": "2025-11-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-11-25T23:00:00Z", "date_only": false, "value": "2025-11-25T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-26T00:00:00Z", "date_only": false, "value": "2025-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2d2e0d46-5fc0-4053-b84e-788bfe104050"}, {"timestamp": "2025-11-26T08:37:11.983Z", "date_only": false, "value": "2025-11-26T08:37:11.983+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2307", "record": "WID-SEC-W-2025-2307", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-26T13:59:44.616Z", "date_only": false, "value": "2025-11-26T13:59:44.616972Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6jzbgh5bk2v", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8f880996-9d54-42b2-ba97-19b15bf1ef3c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6jzbgh5bk2v"}, {"timestamp": "2025-11-26T21:30:06.511Z", "date_only": false, "value": "2025-11-26T21:30:06.511108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m6ksgt2xmq2x", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "1fdbbab6-cc1d-4dd8-8589-1407b709b510", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m6ksgt2xmq2x"}, {"timestamp": "2025-11-27T00:00:00Z", "date_only": false, "value": "2025-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b9a3817f-6cac-40fe-a99e-b5d869584f95"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0e96efbb-adf8-406c-a14c-8cdffa0728f9"}, {"timestamp": "2025-11-28T16:31:40.280Z", "date_only": false, "value": "2025-11-28T16:31:40.280283Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m6pcoyukni22", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b32de28c-fe8c-49db-86c0-a6a086268e0c", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3m6pcoyukni22"}, {"timestamp": "2025-11-28T16:32:22.994Z", "date_only": false, "value": "2025-11-28T16:32:22.994207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3m6pcp747exx2", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "51b0909e-d9d0-44f2-ad6c-e38b5a8002ff", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3m6pcp747exx2"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-29)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ba7dec8b-b392-479d-93fb-6ab8569b5622"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c4d3bf64-4c56-4d54-8d2e-ac0c15ce4ce6"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8413ea8f-c533-406e-bf87-48478b75920c"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "377200b1-01fc-4b5e-a87a-031f6b81a0d2"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-01)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "77034426-f737-4c22-8416-0cc20bd3da7f"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c2ab6ed0-00e8-4f36-8b6b-6ba65beb0642"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8cb73660-64bc-44ef-b5e3-6665d1603e7e"}, {"timestamp": "2025-12-02T10:54:58Z", "date_only": false, "value": "2025-12-02T10:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/notlukatsky/7856", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "34867bfd-a2b3-46d0-af08-76ba094208d5", "content": "\ud83d\udd25 NGFW \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WSUS\n\n\u0417\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e Patch Tuesday \u0434\u0435\u0444\u0435\u043a\u0442 CVE-2025-59287 (CVSS 9.8) \u0432 Windows Server Update Service, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u0434\u043e\u043b\u0433\u043e \u0437\u0430\u043f\u043e\u043c\u043d\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0434\u043e\u0439 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043d\u0430\u0440\u0443\u0448\u0430\u043b\u0438 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0443\u0436\u0435 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e. \n\n\u0413\u0440\u0430\u043c\u043e\u0442\u043d\u0430\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0418\u0411 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438, \u043a\u0430\u043a  \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043d\u0430\u0448\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f: EPP, EDR, KATA/NDR \u0438 NGFW. \u0422\u0435\u043c, \u043a\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0440\u0430\u0437 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u2014 \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0432\u0438\u0434\u0435\u043e \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c NGFW.  \u041c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0444\u0430\u043a\u0442 \u0430\u0442\u0430\u043a\u0438. \n\n#\u0432\u0438\u0434\u0435\u043e #NGFW #Microsoft @\u041f2\u0422", "url": "https://t.me/notlukatsky/7856"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ec383727-2825-4df7-ac46-790eb6ba3b41"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c61a68ac-3ae1-4067-81f9-b8a0211c877a"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "83b00429-77c7-43fa-b61b-3eab2f8104ad"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1bdd7b45-bbd3-4433-9a9e-f1a7c8c00d56"}, {"timestamp": "2025-12-04T09:44:48.409Z", "date_only": false, "value": "2025-12-04T09:44:48.409Z", "kind": "other", "label": "Document generated", "source": "csaf_se \u00b7 SEVD-2025-343-02", "record": "SEVD-2025-343-02", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dd292458-b475-482a-a43f-2f269e241260"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6ad6ecf0-66ec-4e33-a244-f905070d4e0f"}, {"timestamp": "2025-12-06T00:00:00Z", "date_only": false, "value": "2025-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-06)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b162a556-a0c1-4edd-a9ca-c667e80edb01"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-07)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5c03d9f7-9514-4a19-9403-a8affdcf9341"}, {"timestamp": "2025-12-08T00:00:00Z", "date_only": false, "value": "2025-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-08)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "151f53d4-e4c2-4f83-81d3-b48fddaba9a1"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "95672e80-3e00-4d50-8eb0-d1f670691261"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-352-02", "record": "ICSA-25-352-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_se \u00b7 SEVD-2025-343-02", "record": "SEVD-2025-343-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-352-02", "record": "ICSA-25-352-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_se \u00b7 SEVD-2025-343-02", "record": "SEVD-2025-343-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-09T08:00:00Z", "date_only": false, "value": "2025-12-09T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_se \u00b7 SEVD-2025-343-02", "record": "SEVD-2025-343-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-12-09T09:31:57.506Z", "date_only": false, "value": "2025-12-09T09:31:57.506874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/finnjohn3344.bsky.social/post/3m7kaeelvwc2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e6736fc7-1587-4a5e-b3d8-c0357964d0f9", "url": "https://bsky.app/profile/finnjohn3344.bsky.social/post/3m7kaeelvwc2c"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5f309bf6-2801-4d60-842d-1dfbee48dbf5"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "802c2aee-f21f-4491-9a04-9e6c1380c8bf"}, {"timestamp": "2025-12-11T08:21:09.661Z", "date_only": false, "value": "2025-12-11T08:21:09.661593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m7p5dus54u2p", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c2e432ff-5a2f-4c6c-a851-3dcf12acd1ce", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m7p5dus54u2p"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d1fb9758-7e57-499e-a2f3-c3a4a5561641"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "05356bca-79d7-4d8b-8cfa-87cbe788961f"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7e2c7afc-f156-40cd-b522-f82a285b22a6"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f1de6225-f1ee-45a3-92cb-e2f4d8178467"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1084b848-d475-438a-bcd5-9841b5b79e6b"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "35999890-4c3c-4fbc-9236-3ad1c6e1bb7f"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "091e42c3-a3ca-4afe-9798-9a729e75e219"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "30c66e88-07d9-4db0-b3e1-8fe5697fbdfe"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c8f75ed9-7030-4df7-9713-e3beddfc72cc"}, {"timestamp": "2025-12-18T18:23:06.302Z", "date_only": false, "value": "2025-12-18T18:23:06.302862Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-352-02", "record": "ICSA-25-352-02", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-18T18:23:06.311Z", "date_only": false, "value": "2025-12-18T18:23:06.311869Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-352-02", "record": "ICSA-25-352-02", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-12-18T18:23:06.311Z", "date_only": false, "value": "2025-12-18T18:23:06.311869Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-352-02", "record": "ICSA-25-352-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-12-19T08:00:59.376Z", "date_only": false, "value": "2025-12-19T08:00:59.376742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/breachwire.bsky.social/post/3mad7x6ai752r", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "83834871-11ea-4267-b732-c0763f6d76fe", "url": "https://bsky.app/profile/breachwire.bsky.social/post/3mad7x6ai752r"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "00147691-0aae-4b71-ac65-685756195c53"}, {"timestamp": "2025-12-21T00:00:00Z", "date_only": false, "value": "2025-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-21)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c240eb7d-208d-4dfb-a11c-90714c8b9f96"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-22)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "eb24cd8b-5a6b-4abe-81d8-59f5057d96fc"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b678c3ff-24ff-439d-a1eb-a798dcbf6a1b"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4b5a187a-8951-41b1-a2dd-0031f9227a1c"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "73433729-3a71-4fab-851c-414b31862b3f"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "08ff786e-b828-422a-87fd-a3d2db9fb1c9"}, {"timestamp": "2025-12-26T00:00:00Z", "date_only": false, "value": "2025-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c8f47865-9715-4001-a202-437867049371"}, {"timestamp": "2025-12-26T15:00:08Z", "date_only": false, "value": "2025-12-26T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aPT9j1AZS6eosoyzHBZpEIK9Gicq8EphhU_PVxePi8jTVHM", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c055a502-afaf-4a65-88c3-591c3390b481"}, {"timestamp": "2025-12-28T00:00:00Z", "date_only": false, "value": "2025-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a94c303f-d282-4dc5-a52e-c82dc4b0e123"}, {"timestamp": "2025-12-28T14:54:32.317Z", "date_only": false, "value": "2025-12-28T14:54:32.317560Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mb2lax3gvc26", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "62f36e8f-a6e6-410b-8321-b603b6f9dd2e", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mb2lax3gvc26"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3743998e-3190-4a38-a682-6b6791985dc9"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2ef20efb-5e2a-48f5-96a4-ced512df0d1b"}, {"timestamp": "2025-12-30T00:00:00Z", "date_only": false, "value": "2025-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "df543ec0-a890-422a-9c94-955160b307b2"}, {"timestamp": "2025-12-31T00:00:00Z", "date_only": false, "value": "2025-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-31)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3743fc3f-38a2-4abb-9184-69a50ea7270e"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8defecc4-3563-4f89-8c9a-2a97417ff2a0"}, {"timestamp": "2026-01-02T21:00:05Z", "date_only": false, "value": "2026-01-02T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ph5XVLoVKPKzeNd3zHbruXHl3wn31oqUjoUVrNk6if5Q2TM", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "623e35c0-5cf0-4c70-8882-07a5f9d86535"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "38510358-7554-45b6-b0ac-89def8479380"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "422cb92f-e6b1-4746-b8fb-5e9835eba3ea"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3e395f8e-75f4-45a7-81df-4188b308bc12"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d0871bb8-0d9f-4425-822d-c528f183bd78"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "40ec7d9b-f623-4608-96b0-ca3c007314bf"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9b2a7862-dc28-4855-9aa6-0b13b505205e"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "783af367-1eec-42c1-a721-3cc43c8cb99e"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "66634140-488d-465c-943a-d8a6ca85d20e"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bca7b67d-513e-4c77-ab5e-79d0db957f5e"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e01cdcc0-3ca8-4ac0-92b1-0ea3e044a2ec"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a456d16f-8514-44d1-95a1-c0ce28a83174"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "aba86eae-558a-4407-bdc0-7b45b808f0be"}, {"timestamp": "2026-01-17T00:00:00Z", "date_only": false, "value": "2026-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4d78bb15-91ac-4b0c-accd-fa6561cc3719"}, {"timestamp": "2026-01-19T11:54:47.412Z", "date_only": false, "value": "2026-01-19T11:54:47.412017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mcrlhphdtc2e", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2cca6f18-b586-413b-b338-27533605ed09", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3mcrlhphdtc2e"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": false, "value": "2026-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "32382aa4-f38d-4cc8-b5bf-b635367544a0"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b7869565-065c-4481-aa96-130159451722"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1178151a-d957-43ad-8416-a63dbea64bc6"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ad99f11a-016d-40f5-8dd4-bf2566e6ae3b"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "940a777a-9f64-41d8-a281-f8c1b1cb5c74"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "12dda2bb-62d7-4d01-ae14-e6eefef8d715"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2ed9e736-a926-4e56-8f28-20fb68f3ed45"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0a32bfad-a598-4f38-a011-9bd891c678ac"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a601c614-4ce0-4c31-a5b3-3a3a715c8d07"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "361efe4c-7ca0-4bca-8104-2b77f82ad563"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e0fc7d4f-bbf4-46d7-ad15-b6b794454158"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dc25b667-8123-45b5-9b83-39e4d8a70d0f"}, {"timestamp": "2026-02-02T08:48:47Z", "date_only": false, "value": "2026-02-02T08:48:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/drunkentortoise/7862c8720639fd4571087d92b573a4c3", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "385dac02-6b6f-4cf0-9127-ff17af7c23a0", "url": "https://gist.github.com/drunkentortoise/7862c8720639fd4571087d92b573a4c3"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-59287", "field": "timestamps.recorded_at", "uuid": "003f07c3-4b1e-4dc4-99d8-ca33d0431528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:47.731Z", "date_only": false, "value": "2026-02-02T12:25:47.731296Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/003f07c3-4b1e-4dc4-99d8-ca33d0431528", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1841ee6c-19c4-4d7b-99a3-7d92bf85529c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/003f07c3-4b1e-4dc4-99d8-ca33d0431528"}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "492f192d-8eb1-440d-9f42-363737c8a01a"}, {"timestamp": "2026-02-03T04:56:45.928Z", "date_only": false, "value": "2026-02-03T04:56:45.928346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mdwl44ll622f", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2e6a2563-126d-4a0d-839a-b489301c35b3", "url": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mdwl44ll622f"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7a3f1ba8-9d0b-448b-90c2-da4b08d86e9d"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ecf43d87-8532-4eb7-bf2b-ddc42984548e"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5ad687c9-26a3-498b-ab81-0531afba6ad7"}, {"timestamp": "2026-02-08T16:45:59Z", "date_only": false, "value": "2026-02-08T16:45:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/heathdutton/48313fcfd92c964890fdba1a3ec2000a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ddcd6dd5-a6e5-4a58-968f-c0744b11fdec", "url": "https://gist.github.com/heathdutton/48313fcfd92c964890fdba1a3ec2000a"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b723fc01-2e2f-498b-8ec5-8ae3dd543bdb"}, {"timestamp": "2026-02-10T12:36:09.559Z", "date_only": false, "value": "2026-02-10T12:36:09.559266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3meixzyt2oy2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ec9cec78-7511-44ff-ad67-0be67daee18f", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3meixzyt2oy2c"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "feb4adb4-c153-4ecb-955e-087c279fd188"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3ee023c0-ea40-4726-b209-dbebde762d58"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bbfadfff-2384-46e0-b0b5-2a0a27afaa3d"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c1d27690-985e-4b83-8397-c6d3d15a0024"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "aabcd1ba-31c3-46da-8990-1beaf2251282"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c8baf42b-16b6-4393-b4aa-ff8c05934b39"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1053d513-d4ec-4840-936e-cc9b8d4a9ca4"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6eca164e-c51c-4f77-a4d2-1a291e65665d"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ff911fe6-55ed-4bdf-8d92-33aacfa96b08"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ac6fb939-8c72-4560-898f-ca9263a37965"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3f7821e9-7df0-4a53-ba40-e5fc032814f0"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fe2bac59-7256-4102-b9da-e2f8b9be2e40"}, {"timestamp": "2026-02-22T17:24:08.042Z", "date_only": false, "value": "2026-02-22T17:24:08.042Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-59287", "record": "MSRC_CVE-2025-59287", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-22T17:26:07.844Z", "date_only": false, "value": "2026-02-22T17:26:07.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2025-59287", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e8d9b7c2-84d6-44eb-8140-1d70d93fd46c"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f866f477-3002-4458-803e-58a84def91e4"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4b843f18-2099-4c5c-acc0-184f31bad72d"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "11115ac8-0745-49a7-b6cc-2270e2fd124d"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a1e69f87-07e6-4b5e-8d39-89173123339d"}, {"timestamp": "2026-02-26T16:58:01.519Z", "date_only": false, "value": "2026-02-26T16:58:01.519Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-59287", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T16:58:01.519Z", "date_only": false, "value": "2026-02-26T16:58:01.519Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-59287", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f873f284-5654-4ff5-96a5-b3fe17b74f9f"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d9ffa892-5388-4407-a0b0-bba6d32d6464"}, {"timestamp": "2026-02-27T02:00:00Z", "date_only": false, "value": "2026-02-27T02:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://blogs.jpcert.or.jp/en/2026/02/jsac2026day2.html", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2535e43d-0f02-4939-8725-b953fe332057", "url": "https://blogs.jpcert.or.jp/en/2026/02/jsac2026day2.html"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5b085ce8-45bd-4903-ab8c-305ebb77f4d0"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e550486a-a6b2-4d75-bef8-82b8d0d6ab40"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5803b378-afd7-4b81-ae8e-d560b97f7a93"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "98b76bc6-c91f-483d-8569-5d3b96d4adb6"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dbcf6938-9ad3-449c-af68-fb19a5aa52d6"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "87f699c5-6041-4791-9335-11a3ed8ee8cd"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "766d6242-0928-44aa-9e54-d66b3b628f37"}, {"timestamp": "2026-03-06T10:29:27.390Z", "date_only": false, "value": "2026-03-06T10:29:27.390573Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "60aa9160-2228-45d4-8693-92cbcb03e0a9", "url": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dcda94f2-6ffb-4e34-9f02-1876dc038287"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "27eb566b-2f7d-4405-b8f7-316e5ad6a5f8"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cad8f3b9-9ec7-4a30-b8a8-77c658876b30"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "071bb60d-bf3f-41d4-92c3-a269cab28357"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d722e749-188c-4295-bdab-354ebd513e84"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "77026e87-931a-45a1-8fb0-01ea41774b89"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f1991ca0-e127-4a7e-affe-83491bc6f38f"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bd80ab77-2189-4d65-969d-073b34bf18a8"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1cade558-7cd0-4082-b685-a05118c2fb3c"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b87bac25-e1ea-4ac2-88d2-9d8e12ad4037"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ff7050e7-c4d7-42e4-aaa9-da3fda532c2f"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": false, "value": "2026-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b01fcaf5-0178-4ceb-ba7e-a696c88fc8f1"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bfa2e750-7703-41be-b8a9-9d4bc775b083"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9acb4ae7-59a3-40ae-934c-392764a801d5"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1b123c90-aabe-47af-9a78-0e8bcd004461"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c13ae82b-ba02-44d7-ae7e-25460d644696"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ba907e0e-2841-407d-b7bb-2f952ef4cf26"}, {"timestamp": "2026-03-27T10:55:03.943Z", "date_only": false, "value": "2026-03-27T10:55:03.943770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-purpleteamsec.bsky.social/post/3mhzxengst72a", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "beb79a7f-3bcc-4f21-8ab6-2bdd50e8a183", "url": "https://bsky.app/profile/r-purpleteamsec.bsky.social/post/3mhzxengst72a"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "12f10935-7d2f-416f-bbc2-fd6156f72c8f"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a84a2b48-e28f-4f8b-96bc-cee31febd5e9"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "312cb88e-7872-419a-b688-40e31b9bf636"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-08)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8035ecef-59bb-4ca5-966f-8bfb1f679612"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4d6b6284-6705-4e2a-adc3-153ae5f3a7ff"}, {"timestamp": "2026-04-10T12:57:54.186Z", "date_only": false, "value": "2026-04-10T12:57:54.186883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mj5er7xrcx2c", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8bed5edb-66ea-4861-8047-7e2531d16834", "url": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mj5er7xrcx2c"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "334e53d7-27d1-4ddf-9f32-ef901a012147"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3a13c017-2b7b-4842-8519-82c7886bc29f"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4aa5679f-accd-41f4-b747-88ae05943233"}, {"timestamp": "2026-04-17T00:00:00Z", "date_only": false, "value": "2026-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c8614968-948e-4c5e-a4fc-1acc5770b067"}, {"timestamp": "2026-04-17T12:13:21Z", "date_only": false, "value": "2026-04-17T12:13:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptescalator/699", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6e62a213-0dbb-4049-a134-c5ed2bc7e0af", "content": "\u041f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 WSUS: \u0441\u0442\u0430\u0432\u0438\u043c \u0432\u0441\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043c\u0435\u0441\u0442\u0430 \ud83d\udd77\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows Server Update Services (WSUS) \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2025-59287 \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435.\n\n\u0412 \u0440\u0430\u0437\u0431\u043e\u0440\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0448\u0430\u0433\u0438 \u0431\u044b\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0445 \u0432\u0437\u044f\u043b\u0438 \u0438\u0437 \u0441\u0442\u0430\u0442\u044c\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0437\u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u044b \u0441\u0430\u043c\u0438 \u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0438 \u0443\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a CVE-2023-35317, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2025-59287 \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u043b\u0438 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e.\n\n\u042d\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0432 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0441\u0442\u0430\u0445, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0442\u043e\u0447\u043a\u0438 \u043d\u0430\u0434 i \u0438 \u0437\u0430\u043e\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0441\u043d\u0430\u0441\u0442\u043a\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u2757\ufe0f \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\n\u0423\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\n\u2022 \u0421\u0435\u0440\u0432\u0435\u0440 Windows \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0440\u043e\u043b\u044c\u044e WSUS Server (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430)\n\u2022 \u041d\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f KB5070879 / KB5070881 / KB5070882 / KB5070883 / KB5070884 / KB5070886 / KB5070887\n\u2022 \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0430\u043c 8530 (HTTP) \u0438\u043b\u0438 8531 (HTTPS)\n\u2022 \u0423\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\n1\ufe0f\u20e3 \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /ReportingWebService/ReportingWebService.asmx \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f ServerID (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 1)\n\n2\ufe0f\u20e3 \u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 cookies \u2014 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f ServerID, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /SimpleAuthWebService/SimpleAuth.asmx \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f AuthorizationCookie (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 2)\n\n3\ufe0f\u20e3 \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u2014 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a /ClientWebService/Client.asmx \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u043a \u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 3)\n\n4\ufe0f\u20e3 \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u2014 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0447\u0435\u0440\u0435\u0437 ysoserial.net \u0441 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u043c TextFormattingRunProperties, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u044f SynchronizationCompletedCancel (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 4)\n\n\u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 ID 389 (SynchronizationCompletedCancel) WSUS \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c XML \u0441 \u0442\u0435\u043b\u043e\u043c \u043e\u0448\u0438\u0431\u043a\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043b\u043e\u0436\u043d\u044b\u0439 \u0443\u0437\u0435\u043b \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c DNS, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0435. \u042d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043b\u0435\u0433\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0448\u0430\u0431\u043b\u043e\u043d\u0430 Nuclei (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 5). \u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0441\u043d\u0430\u0441\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u2014 \u043d\u0430 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0435 6.\n\n\ud83d\uddff \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u0430\u0441\u0442\u043a\u0430 WSUS \u043b\u043e\u043c\u0430\u0435\u0442\u0441\u044f. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e GUI \u043f\u0440\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0438 \u0443\u0437\u043b\u043e\u0432 \u043f\u0430\u0440\u0441\u0438\u0442 \u0438\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f, \u0430 \u0443 \u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0443\u0437\u043b\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u043e \u0438 \u043d\u0435 \u043f\u043e\u0434\u0434\u0430\u0435\u0442\u0441\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0437\u043b\u043e\u0432 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\n\n\u0414\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0438\u0437 \u0442\u0430\u0431\u043b\u0438\u0446\u044b tbEventInstance \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 SUSDB. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0411\u0414 \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0441\u043b\u0443\u0436\u0431\u0430 WSUS \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 Network Service.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0436\u0431\u0430 WSUS \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u043e\u0441\u043d\u0430\u0441\u0442\u043a\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0441\u0435\u0441\u0441\u0438\u044f (\u0434\u0430\u0436\u0435 Network Service), \u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0437\u043b\u0430\u043c\u0438. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0438 \u0441\u0440\u0430\u0437\u0443 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0441\u043d\u0430\u0441\u0442\u043a\u0443.\n\n$wsus = Get-WsusServer\n\nGet-WsusComputer -NameIncludes \"test1337.test.local\" | ForEach-Object {\n    $wsus.GetComputerTarget($_.Id).Delete()\n}\n\n\u042d\u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u0432\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438:\n\n\u2022 \u0423\u0434\u0430\u043b\u044f\u0435\u0442 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043b\u043e\u0436\u043d\u044b\u0439 \u0443\u0437\u0435\u043b \u0438\u0437 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WSUS\n\u2022 \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u043d\u0438\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0441 ID 389, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n\n\ud83e\uddd0 \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e: \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0432 WSUS \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u2014 \u043b\u043e\u0436\u043d\u044b\u0439 \u0443\u0437\u0435\u043b \u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0432 \u043b\u043e\u0433\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432\u0430\u0436\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c, \u043d\u043e \u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u043e\u0441\u0442\u0435 \u043d\u0438\u0436\u0435 \ud83d\udd3d\n\n#offensive #nuclei #wsus #cve\n@ptescalator (X, Max)", "url": "https://t.me/ptescalator/699"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-21)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "879bffc8-84ff-4d98-a8ae-bee6b9a7bc33"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7d84241f-282a-46ab-8eb2-1e91a27d5340"}, {"timestamp": "2026-04-27T00:00:00Z", "date_only": false, "value": "2026-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bac3e8ae-b232-4c9e-aad7-0b7252e26acf"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "31959c83-8f63-411f-8c0e-628805792f57"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7817fa3b-d6d9-44f0-803b-a59597a17ebf"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9c5bfe95-c03a-4407-ae2d-c793da1489ab"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4d41e308-d64a-4fd8-98ae-f38e35098788"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "73e42da3-b13f-49f6-b00f-27805a1592fe"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a48e3d6d-4e2f-4ddd-89c3-58bb4b9bb15c"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "96130aa2-96b6-4cb6-ade6-0fd58ef9c6ff"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "52ce837e-7f56-4da6-8cf3-7b2d3e4d7794"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d8b22dba-6265-4439-93ae-35cbb061ea5f"}, {"timestamp": "2026-05-10T09:53:12Z", "date_only": false, "value": "2026-05-10T09:53:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ael0030-ai/664ef04df47badeedb2f7f4889762ec0", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "55558c4d-cc3f-4806-ae21-cb76540fd47e", "content": "\n\n  \n\n    Noticias de Alejandro Espa\u00f1a Lanceta\n    https://gist.githubusercontent.com/ael0030-ai/99660b1cfd870d17095a16aa263a4251/raw/noticias.xml\n    Canal RSS creado para la pr\u00e1ctica 9 del Tema 17, con noticias reales sobre sistemas y seguridad inform\u00e1tica.\n    es\n\n    \n    \n      Vulnerabilidad cr\u00edtica en Windows Server WSUS permite ejecuci\u00f3n remota\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      Una vulnerabilidad grave en Windows Server WSUS (CVE-2025-59287) est\u00e1 siendo explotada activamente, permitiendo a atacantes ejecutar c\u00f3digo remoto en servidores vulnerables.\n        \n      ]]>\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      ael0030@medac.es\n      Fri, 24 Oct 2025 10:42:00 GMT\n    \n\n    \n    \n      Ransomware BlackCat aprovecha servidores Exchange sin parchear\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      Microsoft ha alertado de que grupos de ransomware como BlackCat est\u00e1n explotando servidores Exchange sin actualizar para infiltrarse en redes corporativas.\n        \n      ]]>\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      ael0030@medac.es\n      Tue, 14 Jun 2022 08:11:00 GMT\n    \n\n    \n    \n      Fallo 'Copy Fail' en el kernel de Linux permite obtener acceso root\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      Una vulnerabilidad en el kernel de Linux (CVE-2026-31431) permite a atacantes locales escalar privilegios y obtener acceso root en pr\u00e1cticamente cualquier distribuci\u00f3n.\n        \n      ]]>\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      ael0030@medac.es\n      Thu, 30 Apr 2026 06:06:00 GMT\n    \n\n  \n", "url": "https://gist.github.com/ael0030-ai/664ef04df47badeedb2f7f4889762ec0"}, {"timestamp": "2026-05-10T09:58:30Z", "date_only": false, "value": "2026-05-10T09:58:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ael0030-ai/4829553e4ca557c5523ee2dabb2beb2d", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e5f18bd9-b847-462b-91f3-96848203883a", "content": "\n\n  \n\n    Noticias de Alejandro Espa\u00f1a Lanceta\n    https://gist.githubusercontent.com/ael0030-ai/99660b1cfd870d17095a16aa263a4251/raw/noticias.xml\n    Pr\u00e1ctica 9 del Tema 17\n    es\n\n    \n    \n      Vulnerabilidad cr\u00edtica en Windows Server WSUS permite ejecuci\u00f3n remota\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      Una vulnerabilidad grave en Windows Server WSUS (CVE-2025-59287) est\u00e1 siendo explotada activamente, permitiendo a atacantes ejecutar c\u00f3digo remoto en servidores vulnerables.\n        \n      ]]>\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      ael0030@medac.es\n      Fri, 24 Oct 2025 10:42:00 GMT\n    \n\n    \n    \n      Ransomware BlackCat aprovecha servidores Exchange sin parchear\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      Microsoft ha alertado de que grupos de ransomware como BlackCat est\u00e1n explotando servidores Exchange sin actualizar para infiltrarse en redes corporativas.\n        \n      ]]>\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      ael0030@medac.es\n      Tue, 14 Jun 2022 08:11:00 GMT\n    \n\n    \n    \n      Fallo 'Copy Fail' en el kernel de Linux permite obtener acceso root\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      Una vulnerabilidad en el kernel de Linux (CVE-2026-31431) permite a atacantes locales escalar privilegios y obtener acceso root en pr\u00e1cticamente cualquier distribuci\u00f3n.\n        \n      ]]>\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      ael0030@medac.es\n      Thu, 30 Apr 2026 06:06:00 GMT\n    \n\n  \n\n\n", "url": "https://gist.github.com/ael0030-ai/4829553e4ca557c5523ee2dabb2beb2d"}, {"timestamp": "2026-05-10T10:07:40Z", "date_only": false, "value": "2026-05-10T10:07:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ael0030-ai/edde819e9e4d3337189517c21500ce61", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5c685f17-fa2a-4e29-994f-6ae977409618", "content": "\n\n  \n\n    Noticias de Alejandro Espa\u00f1a Lanceta\n    https://gist.githubusercontent.com/ael0030-ai/99660b1cfd870d17095a16aa263a4251/raw/noticias.xml\n    Pr\u00e1ctica 9 del Tema 17\n    es\n\n    \n    \n      Vulnerabilidad cr\u00edtica en Windows Server WSUS permite ejecuci\u00f3n remota\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      Una vulnerabilidad grave en Windows Server WSUS (CVE-2025-59287) est\u00e1 siendo explotada activamente, permitiendo a atacantes ejecutar c\u00f3digo remoto en servidores vulnerables.\n        \n      ]]>\n      https://www.securityweek.com/critical-windows-server-wsus-vulnerability-exploited-in-the-wild/\n      ael0030@medac.es\n      Fri, 24 Oct 2025 10:42:00 GMT\n    \n\n    \n    \n      Ransomware BlackCat aprovecha servidores Exchange sin parchear\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      Microsoft ha alertado de que grupos de ransomware como BlackCat est\u00e1n explotando servidores Exchange sin actualizar para infiltrarse en redes corporativas.\n        \n      ]]>\n      https://www.zdnet.com/article/microsoft-ransomware-gangs-using-unpatched-exchange-servers/\n      ael0030@medac.es\n      Tue, 14 Jun 2022 08:11:00 GMT\n    \n\n    \n    \n      Fallo 'Copy Fail' en el kernel de Linux permite obtener acceso root\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      Una vulnerabilidad en el kernel de Linux (CVE-2026-31431) permite a atacantes locales escalar privilegios y obtener acceso root en pr\u00e1cticamente cualquier distribuci\u00f3n.\n        \n      ]]>\n      https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/\n      ael0030@medac.es\n      Thu, 30 Apr 2026 06:06:00 GMT\n    \n\n  \n", "url": "https://gist.github.com/ael0030-ai/edde819e9e4d3337189517c21500ce61"}, {"timestamp": "2026-05-10T17:04:46Z", "date_only": false, "value": "2026-05-10T17:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/aas0034/6bb830d50633c3d1dac5584d54179acc", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "81dd734b-5eb8-467a-b770-5f349474197c", "content": "\n\n  \n    Noticias de Nacho Acevedo\n    \n    \n    https://gist.githubusercontent.com/TuUsuario/TuID/raw/noticias.xml\n    \n    \n    Actualidad sobre sistemas y seguridad informatica para ASIR.\n    es\n\n    \n      Vulnerabilidad RCE en Windows Server WSUS\n      https://www.microsoft.com/security/cve-2025-59287\n      Fallo critico en WSUS que permite ejecucion remota de codigo. Se recomienda parchear de inmediato.]]>\n      https://www.microsoft.com/security/cve-2025-59287\n      aas0034@medac.es (Nacho Acevedo)\n      Tue, 28 Oct 2025 09:00:00 GMT\n    \n\n    \n      Lanzamiento de OPNsense 26.1 con mejoras en NAT\n      https://opnsense.org/releases/26.1\n      Nueva version con Destination NAT y mejoras en IPv6 para cortafuegos empresariales.]]>\n      https://opnsense.org/releases/26.1\n      aas0034@medac.es (Nacho Acevedo)\n      Mon, 09 Feb 2026 14:30:00 GMT\n    \n\n    \n      IBM anuncia mejoras en migracion de nube hibrida\n      https://www.ibm.com/es-es/cloud/migration\n      Nuevas herramientas para facilitar el paso de servidores fisicos a virtuales de forma automatizada.]]>\n      https://www.ibm.com/es-es/cloud/migration\n      aas0034@medac.es (Nacho Acevedo)\n      Fri, 12 Dec 2025 11:15:00 GMT\n    \n  \n", "url": "https://gist.github.com/aas0034/6bb830d50633c3d1dac5584d54179acc"}, {"timestamp": "2026-05-13T07:00:34Z", "date_only": false, "value": "2026-05-13T07:00:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/84039", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0845f8b3-4cf0-402a-9d95-43f9d60bf310", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-59287\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a salman5230\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-13 07:00:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udd0d Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/84039"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "78fc1b94-5fff-4ac9-9a87-614181ccab5f"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6689b522-1977-4e81-baac-5201082a39e3"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6c63fa2e-aa48-478e-9c56-9d86d3e5277d"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4c28314f-168e-4654-9f66-fc4876f1c650"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "84279454-5455-4860-8ed8-3cfd45d50c22"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d925491a-44a2-4c8b-a912-468deace2a9c"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-01)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1a112d18-e927-47ae-be22-67e4e3592b86"}, {"timestamp": "2026-06-01T10:42:54Z", "date_only": false, "value": "2026-06-01T10:42:54+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-59287", "field": "timestamps.asserted_at", "uuid": "e8db8e4a-e5da-49c4-9937-5758c068e3ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:54Z", "date_only": false, "value": "2026-06-01T10:42:54+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-59287", "field": "timestamps.first_seen_at", "uuid": "e8db8e4a-e5da-49c4-9937-5758c068e3ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:54Z", "date_only": false, "value": "2026-06-01T10:42:54+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-59287", "field": "status.status_updated_at", "uuid": "e8db8e4a-e5da-49c4-9937-5758c068e3ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:54.681Z", "date_only": false, "value": "2026-06-01T10:42:54.681Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-59287", "field": "evidence.0.details.added_date", "uuid": "e8db8e4a-e5da-49c4-9937-5758c068e3ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6ac4bd38-996d-4593-a1e6-b5e17f153dea"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "219deaf1-fc0b-4902-990d-fe7a6930a429"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9fa842a1-fd97-4734-8a67-c328cc08f690"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dcc96dc7-3e2d-4de1-8e26-e54e283aad55"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "68c7c956-1ba3-4f0c-a237-9e0a0eac2ded"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e83a7eb1-991b-44a7-87ad-36c2330513d7"}, {"timestamp": "2026-06-17T09:45:52.480Z", "date_only": false, "value": "2026-06-17T09:45:52.480", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59287", "record": "FKIE_CVE-2025-59287", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:23.093Z", "date_only": false, "value": "2026-06-19T12:45:23.093234Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/377feb41-5362-409a-a20f-29199be951cb", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f228f27f-b69b-45d8-9179-8bc3eb106902", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/377feb41-5362-409a-a20f-29199be951cb"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "49975ded-ce63-4977-8eaa-f62934aab92f"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-59287", "field": "timestamps.recorded_at", "uuid": "e8db8e4a-e5da-49c4-9937-5758c068e3ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:48.505Z", "date_only": false, "value": "2026-06-23T14:03:48.505716Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8db8e4a-e5da-49c4-9937-5758c068e3ec", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fa2e225a-2c21-490c-af47-f70c46da2415", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8db8e4a-e5da-49c4-9937-5758c068e3ec"}, {"timestamp": "2026-06-27T10:00:07.738Z", "date_only": false, "value": "2026-06-27T10:00:07.738366Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f366da22-9059-400f-a90a-e8542dd4e596"}, {"timestamp": "2026-06-28T10:00:05.263Z", "date_only": false, "value": "2026-06-28T10:00:05.263874Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "648dd59d-6928-4db6-bb89-b3cecc43752c"}, {"timestamp": "2026-06-30T09:22:49.726Z", "date_only": false, "value": "2026-06-30T09:22:49.726423Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c6d3144-62fe-433a-a6f4-ac60075d0d29", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3628c3c4-f8e9-4ca0-a6df-abf24fb2745c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1c6d3144-62fe-433a-a6f4-ac60075d0d29"}, {"timestamp": "2026-07-01T10:01:06.102Z", "date_only": false, "value": "2026-07-01T10:01:06.102326Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "dbb821a4-ba0a-43b9-9ec4-72a68b798cd3"}, {"timestamp": "2026-07-05T10:00:13.827Z", "date_only": false, "value": "2026-07-05T10:00:13.827595Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "186d1b14-c688-4bb9-a055-11805f846a69"}, {"timestamp": "2026-07-11T10:00:06.155Z", "date_only": false, "value": "2026-07-11T10:00:06.155931Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "6f474559-0289-48cb-bbb1-ca0b3a177264"}, {"timestamp": "2026-07-12T22:00:06.814Z", "date_only": false, "value": "2026-07-12T22:00:06.814664Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1228", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f8f0bef9-1be3-4f44-ba54-27d4720b5f78", "content": "\ud83d\udea8 WSUS \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: CVE-2025-59287 (CVSS 9.8)\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS: \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f cookie \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd27 \u0421\u0440\u043e\u0447\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u0435! \n\u0414\u0435\u0442\u0430\u043b\u0438: https://hawktrace.com/blog/CVE-2025-59287 \nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287", "url": "https://t.me/securixy_kz/1228"}, {"timestamp": "2026-07-14T00:01:03.064Z", "date_only": false, "value": "2026-07-14T00:01:03.064222Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1228", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bac90b7f-279a-4e15-b68f-ea9136cdbc97", "content": "\ud83d\udea8 WSUS \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: CVE-2025-59287 (CVSS 9.8)\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS: \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f cookie \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd27 \u0421\u0440\u043e\u0447\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u0435! \n\u0414\u0435\u0442\u0430\u043b\u0438: https://hawktrace.com/blog/CVE-2025-59287 \nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287", "url": "https://t.me/securixy_kz/1228"}, {"timestamp": "2026-07-15T10:00:13.442Z", "date_only": false, "value": "2026-07-15T10:00:13.442864Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4894f7df-9648-4e9e-9125-a25a7b2e0fe0"}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-59287", "field": "timestamps.last_seen_at", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": true, "value": "2026-07-16", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-59287", "field": "evidence.0.details.observation_date", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-59287", "field": "status.status_updated_at", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T07:41:48.204Z", "date_only": false, "value": "2026-07-17T07:41:48.204081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mqtas7wvsk2z", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4bb840c1-115a-4658-87e6-5c0e71cc4020", "content": "Nach den kumulative Updates vom 14. Juli 2026 k\u00f6nnen Windows-Clients nicht mehr an #WSUS reporten. H\u00e4ngt mit #CVE-2025-59287 zusammen, weshalb eine Funktion im WSUS tempor\u00e4r deaktiviert wurde.\nborncity.com/blog/2026/07...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mqtas7wvsk2z"}, {"timestamp": "2026-07-17T10:00:09.218Z", "date_only": false, "value": "2026-07-17T10:00:09.218972Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5425492d-d8a3-4948-9a20-526ee5d29229"}, {"timestamp": "2026-07-18T01:00:01Z", "date_only": false, "value": "2026-07-18T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-59287", "field": "timestamps.recorded_at", "uuid": "1c6d3144-62fe-433a-a6f4-ac60075d0d29", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T16:00:07.092Z", "date_only": false, "value": "2026-07-19T16:00:07.092700Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/17269", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "25902b6e-b85e-4617-b59d-13de2c5fe2b5", "content": "Hackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287 \u2013 gbhackers.com\n\nMon, 03 Nov 2025 22:00:42", "url": "https://t.me/MalaysiaHacktivistz/17269"}, {"timestamp": "2026-07-20T00:00:09.622Z", "date_only": false, "value": "2026-07-20T00:00:09.622295Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/17269", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d6f8b983-b8be-451f-8488-40cdee995c1b", "content": "Hackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287 \u2013 gbhackers.com\n\nMon, 03 Nov 2025 22:00:42", "url": "https://t.me/MalaysiaHacktivistz/17269"}, {"timestamp": "2026-07-20T19:00:05.983Z", "date_only": false, "value": "2026-07-20T19:00:05.983969Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/8187", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a26073a0-a139-428d-baed-88f7789d08bf", "content": "Hackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287 \u2013 gbhackers.com\n\nMon, 03 Nov 2025 22:00:42", "url": "https://t.me/MalaysiaHacktivistz/8187"}, {"timestamp": "2026-07-20T19:00:09.637Z", "date_only": false, "value": "2026-07-20T19:00:09.637720Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2837", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "df8d19d0-48c3-4a78-9cea-9aa6a1b71de5", "content": "CVE-2025-59287 \n*\nWSUS Remote Code Execution\n\nwriteUp + POC", "url": "https://t.me/proxy_bar/2837"}, {"timestamp": "2026-07-22T00:00:25.756Z", "date_only": false, "value": "2026-07-22T00:00:25.756475Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2837", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e315fadd-5ebf-4522-bf34-0b9538014315", "content": "CVE-2025-59287 \n*\nWSUS Remote Code Execution\n\nwriteUp + POC", "url": "https://t.me/proxy_bar/2837"}, {"timestamp": "2026-07-22T00:00:30.456Z", "date_only": false, "value": "2026-07-22T00:00:30.456352Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/8187", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "561b0b58-2b45-4c52-9e68-d181ad57f70b", "content": "Hackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287 \u2013 gbhackers.com\n\nMon, 03 Nov 2025 22:00:42", "url": "https://t.me/MalaysiaHacktivistz/8187"}, {"timestamp": "2026-07-23T10:00:20.163Z", "date_only": false, "value": "2026-07-23T10:00:20.163792Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "588c8e14-f34c-4001-82a2-fbfaeac6c390"}, {"timestamp": "2026-07-25T08:57:56.488Z", "date_only": false, "value": "2026-07-25T08:57:56.488668Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "record": "cve-2025-59287", "field": "creation_timestamp", "uuid": "5d2833d5-581c-4f2b-82d4-b268f5d20875", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "url": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267"}, {"timestamp": "2026-07-25T10:00:09.952Z", "date_only": false, "value": "2026-07-25T10:00:09.952495Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-24)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b337d81a-4fb9-4ce8-ba06-e48be728fc63"}, {"timestamp": "2026-07-25T15:00:11.467Z", "date_only": false, "value": "2026-07-25T15:00:11.467745Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/573", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7e2dedea-1c55-4eb4-905f-282ab917a7c8", "content": "\u041c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 Windows Server \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS\n\n\ud83d\udea8 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Windows Server \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WSUS. \u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA KEV \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0437\u043b\u043e\u043c\u044b, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043d\u043e\u0432\u044b\u043c \u0430\u043a\u0442\u043e\u0440\u043e\u043c UNC6512.\n\n\ud83d\udd27 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 8 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0430\u043f\u0434\u0435\u0439\u0442 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 7 \u0434\u043d\u0435\u0439 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 100 000 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83d\udcbb \u0412 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0447\u0442\u0438 500 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c WSUS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043c\u0438\u0448\u0435\u043d\u044f\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0431\u0435\u0437 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438\u043b\u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 PowerShell \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #wsus #microsoft #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/573"}, {"timestamp": "2026-07-26T00:00:11.409Z", "date_only": false, "value": "2026-07-26T00:00:11.409034Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linuxkalii/1741", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f7d20c6a-e9f1-4054-81aa-eb45008d2077", "content": "\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 WSUS\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Microsoft Windows Server Update Services, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\ud83d\ude80\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043c\u043e\u043c\u0435\u043d\u0442\u044b:\n- \u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 .NET BinaryFormatter \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n- \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 Windows \u0438 Linux.\n- \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440 \u0441 \u0431\u0435\u0437\u0432\u0440\u0435\u0434\u043d\u044b\u043c \u043a\u0430\u043b\u044c\u043a\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u043c.\n- \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\ud83d\udccc GitHub: https://github.com/th1n0/CVE-2025-59287\n\n#python", "url": "https://t.me/linuxkalii/1741"}, {"timestamp": "2026-07-26T00:00:11.447Z", "date_only": false, "value": "2026-07-26T00:00:11.447597Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linuxkalii/1752", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f3a7cdbd-3380-46a4-a6c7-362ee03e803d", "content": "\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 WSUS\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Microsoft WSUS, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e SYSTEM.\n\n\ud83d\ude80\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043c\u043e\u043c\u0435\u043d\u0442\u044b:\n- \u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 .NET BinaryFormatter \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n- \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 Windows \u0438 Linux\n- \u041e\u0431\u0440\u0430\u0437\u0435\u0446 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\n\ud83d\udccc GitHub: https://github.com/Sid6Effect/CVE-2025-59287\n\n#python", "url": "https://t.me/linuxkalii/1752"}, {"timestamp": "2026-07-26T00:00:32.297Z", "date_only": false, "value": "2026-07-26T00:00:32.297591Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/573", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3b1e034c-d8b0-4ea1-93ba-5134ea28977b", "content": "\u041c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 Windows Server \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS\n\n\ud83d\udea8 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Windows Server \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WSUS. \u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA KEV \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0437\u043b\u043e\u043c\u044b, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043d\u043e\u0432\u044b\u043c \u0430\u043a\u0442\u043e\u0440\u043e\u043c UNC6512.\n\n\ud83d\udd27 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 8 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0430\u043f\u0434\u0435\u0439\u0442 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 7 \u0434\u043d\u0435\u0439 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 100 000 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83d\udcbb \u0412 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0447\u0442\u0438 500 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u043c WSUS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043c\u0438\u0448\u0435\u043d\u044f\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0431\u0435\u0437 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438\u043b\u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 PowerShell \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #wsus #microsoft #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/573"}, {"timestamp": "2026-07-26T02:00:08.336Z", "date_only": false, "value": "2026-07-26T02:00:08.336025Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/985", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "777ae6c6-be9a-4a58-b054-fd33e13e71d7", "content": "https://hawktrace.com/blog/CVE-2025-59287", "url": "https://t.me/cyberwarehouse/985"}, {"timestamp": "2026-07-26T02:00:08.365Z", "date_only": false, "value": "2026-07-26T02:00:08.365533Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/986", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b15f004b-b2e4-48cc-8d19-1711e2887c40", "content": "CVE-2025-59287 WSUS Exploit Detection - Free YARA Rules I Developed\nhttps://github.com/SUmidcyber/YaraRule/tree/main/CVE-2025-59287:\n\n1. We read every piece of feedback, and take your input very seriously.\n2. To see all available qualifiers, see our documentation.\n3. There was an error while loading.\n\n@secharvester", "url": "https://t.me/cyberwarehouse/986"}, {"timestamp": "2026-07-26T02:00:08.400Z", "date_only": false, "value": "2026-07-26T02:00:08.400600Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/989", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "09b85f2f-d4ea-496c-848e-857903e9a620", "content": "Sid6Effect/CVE-2025-59287\nWSUS vulnerability PoC\nLanguage: Python\n#cve_2025_59287 #wsus_vulnerability\nStars: 220 Issues: 0 Forks: 69\nhttps://github.com/Sid6Effect/CVE-2025-59287", "url": "https://t.me/cyberwarehouse/989"}, {"timestamp": "2026-07-26T02:03:00.420Z", "date_only": false, "value": "2026-07-26T02:03:00.420224Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3877", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a8cc349d-6b92-42cc-8c54-b643f778dd44", "content": "\ud83d\udc7e \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0443\u043b\u043e\u0432 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b \u0431\u043e\u0433\u0430\u0442\u044b\u043c: \u043d\u0430\u0448\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0442\u0430\u043a\u043e\u0432\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0432\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u043d\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 MaxPatrol VM, \u043a\u0443\u0434\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 dbugs \ud83d\ude09\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft\n\n\u041c\u043e\u0433\u0443\u0442 \u043a\u043e\u0441\u043d\u0443\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access Connection Manager \u2014  PT-2025-42115 (CVE-2025-59230, CVSS \u2014 7,8)\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Agere Modem \u2014 PT-2025-41973 (CVE-2025-24990, CVSS \u2014 7,8)\n\n\u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server (WSUS) \u2014 PT-2025-42147 (CVE-2025-59287, CVSS \u2014 9,8)\n\n\u041c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 Windows-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 WSUS Server Role. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0445\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0438 \u0441\u0438\u0441\u0442\u0435\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Microsoft Windows \u2014 PT-2025-34796 (CVE-2025-9491, CVSS \u2014 7,8)\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0430 Windows \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 .lnk-\u0444\u0430\u0439\u043b\u0430\u0445, \u0441\u043a\u0440\u044b\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Microsoft SharePoint \u2014 PT-2025-28601 (CVE-2025-49704, CVSS \u2014 8,8)\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430 Linux \u2014 PT-2025-24274 (CVE-2025-38001, CVSS \u2014 5,7)\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Debian 12, Ubuntu \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 (COS) Google.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd34\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u0430\u0437 \u0437\u043d\u0430\u043d\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 XWiki \u2014 PT-2025-7547 (CVE-2025-24893, CVSS \u2014 9,8)\n\n\u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 24 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 XWiki.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0440\u043e\u0441 SolrSearch, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0432 XWiki. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd34 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra Collaboration Suite \u2014 PT-2025-11082 (CVE-2025-27915, CVSS \u2014 5,4)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430, Zimbra \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 6 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 127 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 ICS-\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434. \u0415\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\ud83d\udd34 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0432 Redis \u2014 PT-2025-40594 (CVE-2025-49844, CVSS \u2014 9,9)\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Wiz, \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 330 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Redis (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0442\u044b\u0441\u044f\u0447 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0435\u043c\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c, \u0441\u0442\u0438\u0440\u0430\u0442\u044c \u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Redis \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udc49 \u0411\u043e\u043b\u044c\u0448\u0435 \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442\u0435.\n\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM \n@Positive_Technologies", "url": "https://t.me/Positive_Technologies/3877"}, {"timestamp": "2026-07-26T10:00:04.851Z", "date_only": false, "value": "2026-07-26T10:00:04.851399Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "180ff45e-6e33-4bee-9f41-a0f1dde2613f"}, {"timestamp": "2026-07-27T00:00:32.729Z", "date_only": false, "value": "2026-07-27T00:00:32.729275Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/989", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b8518228-3ed9-4a3b-8f5d-db21db02e4a1", "content": "Sid6Effect/CVE-2025-59287\nWSUS vulnerability PoC\nLanguage: Python\n#cve_2025_59287 #wsus_vulnerability\nStars: 220 Issues: 0 Forks: 69\nhttps://github.com/Sid6Effect/CVE-2025-59287", "url": "https://t.me/cyberwarehouse/989"}, {"timestamp": "2026-07-27T00:00:32.753Z", "date_only": false, "value": "2026-07-27T00:00:32.753260Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/986", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "63cd5240-3fc9-4eb8-b80c-b526e2bb5d28", "content": "CVE-2025-59287 WSUS Exploit Detection - Free YARA Rules I Developed\nhttps://github.com/SUmidcyber/YaraRule/tree/main/CVE-2025-59287:\n\n1. We read every piece of feedback, and take your input very seriously.\n2. To see all available qualifiers, see our documentation.\n3. There was an error while loading.\n\n@secharvester", "url": "https://t.me/cyberwarehouse/986"}, {"timestamp": "2026-07-27T00:00:32.784Z", "date_only": false, "value": "2026-07-27T00:00:32.784998Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/985", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a61bd5a7-0022-472e-a62d-d3200a9d2dbe", "content": "https://hawktrace.com/blog/CVE-2025-59287", "url": "https://t.me/cyberwarehouse/985"}, {"timestamp": "2026-07-27T10:00:09.767Z", "date_only": false, "value": "2026-07-27T10:00:09.767708Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7152b453-29a8-41a8-ad8f-855e44c980cd"}, {"timestamp": "2026-07-29T12:01:52.411Z", "date_only": false, "value": "2026-07-29T12:01:52.411294Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberedrussia/1792", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bd60f98b-69ae-42ba-b474-c29187e62108", "content": "\ud83d\udee1WSUS \u0430\u0442\u0430\u043a\u0443\u044e\u0442: \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287\n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2025-59287 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Windows Server Update Services (WSUS), \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d \u0441\u0442\u0430\u043b \u0432\u043e\u0440\u043e\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u2796\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u2014 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0434\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0438\u0441\u0447\u0435\u0437\u043d\u0443\u0442\u044c \u0438\u0437 enterprise-\u043a\u043e\u0434\u0430.\n\n\u2796\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e WSUS \u043d\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0435\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0418 \u044d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \u0423\u0436\u0435 18 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 HawkTrace \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u0427\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u2014 \u043d\u043e \u043a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c.  \n\n\u2796\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Eye Security \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u043a\u043e\u043b\u043e 2 500 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 WSUS \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0413\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u0438\u0439 NCSC-NL \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b: \u0430\u0442\u0430\u043a\u0438 \u0438\u0434\u0443\u0442 \u043d\u0435 \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e \u2014 \u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n\u2796\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e \u0442\u043e, \u0447\u0442\u043e \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b WSUS \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u0430\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438. \u0410 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0438 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\ud83d\udfe2\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438: \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442\u044b WSUS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP 8530 \u0438 8531) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0430\u0432\u0438\u043b \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\ud83d\udfe2\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0439\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b WSUS: \u043e\u0431\u0440\u0430\u0449\u0430\u0439\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u043b\u0438 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430.\n\ud83d\udfe2\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f: \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0433\u0434\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0441\u043b\u0443\u0436\u0431\u044b WSUS \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/cyberedrussia/1792"}, {"timestamp": "2026-07-29T13:00:05.265Z", "date_only": false, "value": "2026-07-29T13:00:05.265269Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/624", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b4b0a0a2-2f20-43d8-af81-735ec6999b8f", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nWindows Server Update Services (WSUS) vulnerability abused to harvest sensitive data\nExploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code\n\nSource: news.sophos.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/624"}, {"timestamp": "2026-07-29T13:00:05.553Z", "date_only": false, "value": "2026-07-29T13:00:05.553908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/623", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "be17d5c1-0a53-4e17-a25c-fd71bf150236", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nWindows Server Update Services (WSUS) vulnerability abused to harvest sensitive data\nExploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code\n\nSource: news.sophos.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/623"}, {"timestamp": "2026-07-29T13:00:05.687Z", "date_only": false, "value": "2026-07-29T13:00:05.687226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/463", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9bbd4c25-7ffc-4e39-aa0d-b407b0048342", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-59287\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 Windows Server Update Services (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 ClientWebService. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 [\u2026] \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\n\nSource: 1275.ru \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/463"}, {"timestamp": "2026-07-30T00:00:29.966Z", "date_only": false, "value": "2026-07-30T00:00:29.966342Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/463", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a398b36a-fd84-4ef1-9b5a-e69edd7fc179", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-59287\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 Windows Server Update Services (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 ClientWebService. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 [\u2026] \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\n\nSource: 1275.ru \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/463"}, {"timestamp": "2026-07-30T00:00:30.092Z", "date_only": false, "value": "2026-07-30T00:00:30.092617Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/623", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4ad2ec22-781c-407e-9bdf-c5bdeae10a1c", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nWindows Server Update Services (WSUS) vulnerability abused to harvest sensitive data\nExploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code\n\nSource: news.sophos.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/623"}, {"timestamp": "2026-07-30T01:00:15.545Z", "date_only": false, "value": "2026-07-30T01:00:15.545573Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/624", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9e0ae98e-1c50-4340-bf9d-d46c77790aa8", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nWindows Server Update Services (WSUS) vulnerability abused to harvest sensitive data\nExploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code\n\nSource: news.sophos.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/624"}, {"timestamp": "2026-07-31T10:00:08.090Z", "date_only": false, "value": "2026-07-31T10:00:08.090820Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c6f265f6-72e8-4a8e-88dd-f55b32db2c44"}, {"timestamp": "2026-08-01T10:00:04.621Z", "date_only": false, "value": "2026-08-01T10:00:04.621121Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ec6dfc6a-0cf5-4003-afa7-f32c227c69c2"}, {"timestamp": "2026-08-01T17:00:04.239Z", "date_only": false, "value": "2026-08-01T17:00:04.239701Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberedrussia/1792", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0b6d8840-5430-4b44-a17c-26a2fe238d4d", "content": "\ud83d\udee1WSUS \u0430\u0442\u0430\u043a\u0443\u044e\u0442: \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287\n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2025-59287 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Windows Server Update Services (WSUS), \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d \u0441\u0442\u0430\u043b \u0432\u043e\u0440\u043e\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u2796\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u2014 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0434\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0438\u0441\u0447\u0435\u0437\u043d\u0443\u0442\u044c \u0438\u0437 enterprise-\u043a\u043e\u0434\u0430.\n\n\u2796\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e WSUS \u043d\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0435\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0418 \u044d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \u0423\u0436\u0435 18 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 HawkTrace \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \u0427\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u2014 \u043d\u043e \u043a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c.  \n\n\u2796\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Eye Security \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u043a\u043e\u043b\u043e 2 500 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 WSUS \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0413\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u0438\u0439 NCSC-NL \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b: \u0430\u0442\u0430\u043a\u0438 \u0438\u0434\u0443\u0442 \u043d\u0435 \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e \u2014 \u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n\u2796\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e \u0442\u043e, \u0447\u0442\u043e \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b WSUS \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u0430\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438. \u0410 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u2014 \u0438 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\ud83d\udfe2\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438: \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442\u044b WSUS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP 8530 \u0438 8531) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0430\u0432\u0438\u043b \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\ud83d\udfe2\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0439\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b WSUS: \u043e\u0431\u0440\u0430\u0449\u0430\u0439\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u043b\u0438 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430.\n\ud83d\udfe2\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f: \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0433\u0434\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0441\u043b\u0443\u0436\u0431\u044b WSUS \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/cyberedrussia/1792"}, {"timestamp": "2026-08-04T10:00:09.027Z", "date_only": false, "value": "2026-08-04T10:00:09.027375Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "43d09c77-3637-4403-8b2f-02214ec5ddf2"}, {"timestamp": "2026-08-04T13:00:06.578Z", "date_only": false, "value": "2026-08-04T13:00:06.578963Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/knowyouradversary/327", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7b81bc54-5ec1-44d4-8706-ba6de8e4bfac", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0414\u0443\u043c\u0430\u044e, \u0432\u044b \u0443\u0436\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0438 \u043e \u0441\u0432\u0435\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Windows Server Update Services (WSUS). \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 Exploit Public-Facing Application (T1190) \u0438 CVE-2025-59287.\n\n\u0418\u0442\u0430\u043a, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u044d\u0442\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u043e\u0442 wsusservice.exe \u0438 w3wp.exe. \u0427\u0442\u043e, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: (\"cmd.exe\" OR \"powershell.exe\")\n\nAND\n\nproc_p_file_path: \"wsusservice.exe\"\n\n\u0412\u0442\u043e\u0440\u0430\u044f:\n\nevent_type: \"processcreatewin\"\n\nAND\n\nproc_file_path: (\"cmd.exe\" OR \"powershell.exe\")\n\nAND\n\nproc_p_file_path: \"w3wp.exe\"\n\nAND\n\nproc_p_cmdline: \"wsuspool\"\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b PowerShell \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 webhook[.]site. \u0418 \u044d\u0442\u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f:\n\nevent_type: \"dnsreqwin\"\n\nAND\n\ndns_rname: \"webhook.site\"\n\nAND\n\nproc_file_path: \"powershell.exe\"\n\n\u0423\u0432\u0438\u0434\u0438\u043c\u0441\u044f \u0437\u0430\u0432\u0442\u0440\u0430!\n\nEnglish version", "url": "https://t.me/knowyouradversary/327"}, {"timestamp": "2026-08-04T14:00:22.062Z", "date_only": false, "value": "2026-08-04T14:00:22.062359Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/151", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "97d304e3-4809-4fa2-87a8-12b168ffa729", "content": "\ud83d\udea8 RCE \u0432 Microsoft WSUS \u2014 \u0430\u043f\u0434\u0435\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0436\u0443\n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 (CVSS 9.8) \u0432 Windows Server Update Services (WSUS). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 SOAP-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a .asmx-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c (\u043d\u0430\u043f\u0440., SimpleAuthWebService/GetAuthorizationCookie). \u041f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c WSUS \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0435\u043b\u044c\u0437\u044f \u2014 \u0444\u0438\u043a\u0441 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~250 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Microsoft WSUS \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 \u2014 \u0432\u0441\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0431\u044b\u043b\u0438 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b: WSUS Server Role \u043d\u0430 Windows Server 2012/2012 R2/2016/2019/2022/2025.\n\u2022 \u0422\u0438\u043f: pre-auth RCE \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.\n\u2022 \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b/\u043f\u0443\u0442\u0438: /SimpleAuthWebService/SimpleAuth.asmx, /ClientWebService/Client.asmx, /ReportingWebService/ReportingWebService.asmx.\n\u2022 \u041f\u043e\u0440\u0442\u044b: 8530/HTTP, 8531/HTTPS (IIS).\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u041d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 POST \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c .asmx \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c SOAPAction (\u043d\u0430\u043f\u0440., ...GetAuthorizationCookie).\n\u2022 \u041e\u0442\u0432\u0435\u0442\u044b 500/401/403 \u0441 soap:Fault/faultstring.\n\u2022 \u0426\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 w3wp.exe/wsusservice.exe \u2192 cmd.exe/powershell.exe.\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432 IIS-\u043b\u043e\u0433\u0430\u0445 \u043f\u043e \u043f\u043e\u0440\u0442\u0430\u043c 8530/8531.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2025-59287.\n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e WSUS: \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a 8530/8531 (VPN/ACL/WAF).\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c IIS-\u043b\u043e\u0433\u0438 \u043d\u0430 POST \u043a *.asmx, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0445\u043e\u0442\u0443 \u043d\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (\u0441\u043a\u0440\u0438\u043f\u0442\u044b/\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a/\u0441\u043b\u0443\u0436\u0431\u044b).\n4. \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c WSDL-\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430\u0440\u0443\u0436\u0443, \u0435\u0441\u043b\u0438 \u043d\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438; \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e/MTLS.\n5. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043d\u0430 SOAP-\u043f\u0430\u0442\u0442\u0435\u0440\u043d\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0448\u0435\u043b\u043b\u043e\u0432 \u043e\u0442 w3wp.exe.\n\n\ud83d\udd17 \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438\n\u2022 https://www.runzero.com/blog/microsoft-wsus/\n\u2022 https://www.huntress.com/blog/exploitation-of-windows-server-update-services-remote-code-execution-vulnerability\n\u2022 https://www.picussecurity.com/resource/blog/cve-2025-59287-explained-wsus-unauthenticated-rce-vulnerability", "url": "https://t.me/cyberok_news/151"}, {"timestamp": "2026-08-05T10:00:06.165Z", "date_only": false, "value": "2026-08-05T10:00:06.165311Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a0ef96b1-56b4-4766-908f-733b044bdd08"}, {"timestamp": "2026-08-05T10:15:14.602Z", "date_only": false, "value": "2026-08-05T10:15:14.602418Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0910b583-3216-47e2-9525-1ec72f4f2688"}, {"timestamp": "2026-08-06T00:00:48.333Z", "date_only": false, "value": "2026-08-06T00:00:48.333720Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberok_news/151", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "895cd26f-6706-486a-9f33-04b5e9290e17", "content": "\ud83d\udea8 RCE \u0432 Microsoft WSUS \u2014 \u0430\u043f\u0434\u0435\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0436\u0443\n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 (CVSS 9.8) \u0432 Windows Server Update Services (WSUS). \u0418\u0437-\u0437\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 SOAP-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a .asmx-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c (\u043d\u0430\u043f\u0440., SimpleAuthWebService/GetAuthorizationCookie). \u041f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c WSUS \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0435\u043b\u044c\u0437\u044f \u2014 \u0444\u0438\u043a\u0441 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~250 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Microsoft WSUS \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 \u2014 \u0432\u0441\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0431\u044b\u043b\u0438 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b: WSUS Server Role \u043d\u0430 Windows Server 2012/2012 R2/2016/2019/2022/2025.\n\u2022 \u0422\u0438\u043f: pre-auth RCE \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.\n\u2022 \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b/\u043f\u0443\u0442\u0438: /SimpleAuthWebService/SimpleAuth.asmx, /ClientWebService/Client.asmx, /ReportingWebService/ReportingWebService.asmx.\n\u2022 \u041f\u043e\u0440\u0442\u044b: 8530/HTTP, 8531/HTTPS (IIS).\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u041d\u0435\u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 POST \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c .asmx \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c SOAPAction (\u043d\u0430\u043f\u0440., ...GetAuthorizationCookie).\n\u2022 \u041e\u0442\u0432\u0435\u0442\u044b 500/401/403 \u0441 soap:Fault/faultstring.\n\u2022 \u0426\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 w3wp.exe/wsusservice.exe \u2192 cmd.exe/powershell.exe.\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432 IIS-\u043b\u043e\u0433\u0430\u0445 \u043f\u043e \u043f\u043e\u0440\u0442\u0430\u043c 8530/8531.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2025-59287.\n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e WSUS: \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a 8530/8531 (VPN/ACL/WAF).\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c IIS-\u043b\u043e\u0433\u0438 \u043d\u0430 POST \u043a *.asmx, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0445\u043e\u0442\u0443 \u043d\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (\u0441\u043a\u0440\u0438\u043f\u0442\u044b/\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a/\u0441\u043b\u0443\u0436\u0431\u044b).\n4. \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c WSDL-\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430\u0440\u0443\u0436\u0443, \u0435\u0441\u043b\u0438 \u043d\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438; \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e/MTLS.\n5. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043d\u0430 SOAP-\u043f\u0430\u0442\u0442\u0435\u0440\u043d\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0448\u0435\u043b\u043b\u043e\u0432 \u043e\u0442 w3wp.exe.\n\n\ud83d\udd17 \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438\n\u2022 https://www.runzero.com/blog/microsoft-wsus/\n\u2022 https://www.huntress.com/blog/exploitation-of-windows-server-update-services-remote-code-execution-vulnerability\n\u2022 https://www.picussecurity.com/resource/blog/cve-2025-59287-explained-wsus-unauthenticated-rce-vulnerability", "url": "https://t.me/cyberok_news/151"}, {"timestamp": "2026-08-06T02:00:04.568Z", "date_only": false, "value": "2026-08-06T02:00:04.568309Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linuxkalii/1752", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d1f1e237-faaf-4c34-9326-d867b26bd8df", "content": "\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 WSUS\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Microsoft WSUS, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e SYSTEM.\n\n\ud83d\ude80\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043c\u043e\u043c\u0435\u043d\u0442\u044b:\n- \u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 .NET BinaryFormatter \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438\n- \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 Windows \u0438 Linux\n- \u041e\u0431\u0440\u0430\u0437\u0435\u0446 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\n\ud83d\udccc GitHub: https://github.com/Sid6Effect/CVE-2025-59287\n\n#python", "url": "https://t.me/linuxkalii/1752"}, {"timestamp": "2026-08-06T02:00:04.605Z", "date_only": false, "value": "2026-08-06T02:00:04.605761Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linuxkalii/1741", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "bc87d0b0-c0f7-4b69-902c-6a6e682ee85c", "content": "\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u0432 WSUS\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Microsoft Windows Server Update Services, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 SOAP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\ud83d\ude80\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043c\u043e\u043c\u0435\u043d\u0442\u044b:\n- \u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 .NET BinaryFormatter \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n- \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 Windows \u0438 Linux.\n- \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440 \u0441 \u0431\u0435\u0437\u0432\u0440\u0435\u0434\u043d\u044b\u043c \u043a\u0430\u043b\u044c\u043a\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u043c.\n- \u041e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\ud83d\udccc GitHub: https://github.com/th1n0/CVE-2025-59287\n\n#python", "url": "https://t.me/linuxkalii/1741"}, {"timestamp": "2026-08-06T10:00:09.016Z", "date_only": false, "value": "2026-08-06T10:00:09.016154Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2a65b133-cef0-4ee7-97c3-3ec77042d3bd"}, {"timestamp": "2026-08-06T10:15:07.899Z", "date_only": false, "value": "2026-08-06T10:15:07.899136Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "1b8a1690-5d4b-404d-a8a6-9ac6181c81c8"}, {"timestamp": "2026-08-08T10:15:19.771Z", "date_only": false, "value": "2026-08-08T10:15:19.771012Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d447b8d1-9fcd-440e-9766-b2fb0f33d759"}, {"timestamp": "2026-08-09T04:04:01.558Z", "date_only": false, "value": "2026-08-09T04:04:01.558813Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1125", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "212b88d9-b7f7-47a9-bd89-f534d4065fad", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft WSUS \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\n\u2014\n\nSummary:\n\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438\u0437-\u0437\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 Windows Server Update Services (WSUS) - \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Microsoft. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVSS 9.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 14 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 - SEC-1275-1\nPublished: 2025-10-30 16:58 | Author: SEC-1275\n\n#generalcybernews #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1125"}, {"timestamp": "2026-08-09T04:08:22.007Z", "date_only": false, "value": "2026-08-09T04:08:22.007426Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1136", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "4bcd309e-381d-4e0a-bb7a-778097538de2", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS: \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2025-59287\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Windows Server Update Services (WSUS) \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2025-59287 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u0422\u0440\u0435\u0432\u043e\u0436\u043d\u044b\u043c \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u043c \u0441\u0442\u0430\u043b\u043e \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a (EDR), \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b whoami.exe \u0441 \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 - SEC-1275-1\nPublished: 2025-10-29 16:38 | Author: SEC-1275\n\n#vulnerabilitiesexploits #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1136"}, {"timestamp": "2026-08-09T04:17:03.597Z", "date_only": false, "value": "2026-08-09T04:17:03.597753Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/777", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7dbfc074-bf4e-4306-94f7-2c9baa582176", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nCVE-2025-59287\nWatchGuard Firebox / Fireware OS iked Out\u2011of\u2011Bounds Write RCE\n\nSource: www.horizon3.ai \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/777"}, {"timestamp": "2026-08-09T04:17:03.635Z", "date_only": false, "value": "2026-08-09T04:17:03.635424Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/783", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e0d101b1-390f-465c-9b6a-af1da2a79b9b", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nExploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287)\nHuntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287).\n\nSource: www.huntress.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/783"}, {"timestamp": "2026-08-09T04:19:14.235Z", "date_only": false, "value": "2026-08-09T04:19:14.235722Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/690", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "11619709-4039-4e8a-b518-96031d138a82", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nMicrosoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated October 28)\nCVE-2025-59287 is a critical RCE vulnerability identified in Microsoft\u2019s WSUS. Our observations from cases show a consistent methodology. The post Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated October 28) appeared first on Unit 42 .\n\nSource: unit42.paloaltonetworks.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/690"}, {"timestamp": "2026-08-10T00:00:30.585Z", "date_only": false, "value": "2026-08-10T00:00:30.585602Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/690", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "fdaaf824-7e82-4846-8c98-c82b95e7e425", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nMicrosoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated October 28)\nCVE-2025-59287 is a critical RCE vulnerability identified in Microsoft\u2019s WSUS. Our observations from cases show a consistent methodology. The post Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated October 28) appeared first on Unit 42 .\n\nSource: unit42.paloaltonetworks.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/690"}, {"timestamp": "2026-08-10T00:00:31.321Z", "date_only": false, "value": "2026-08-10T00:00:31.321640Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/783", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8e587b5a-5322-4655-aac0-caa5dcf057f1", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nExploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287)\nHuntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287).\n\nSource: www.huntress.com \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/783"}, {"timestamp": "2026-08-10T00:00:31.363Z", "date_only": false, "value": "2026-08-10T00:00:31.363327Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Intel_Encyclopedia/777", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a7649523-aa66-49d0-8d88-a41f113b4c5f", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nCVE-2025-59287\nWatchGuard Firebox / Fireware OS iked Out\u2011of\u2011Bounds Write RCE\n\nSource: www.horizon3.ai \u2014 link\n#cybersecurity #infosec", "url": "https://t.me/Intel_Encyclopedia/777"}, {"timestamp": "2026-08-11T18:00:03.160Z", "date_only": false, "value": "2026-08-11T18:00:03.160775Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ad_poheque/107", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "c38659f8-9a0b-4714-8e81-623355e8c61e", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430\u044f RCE \u0432 WSUS (CVE-2025-59287):\n\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0432 GetCookie().\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 WSUS \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 HTTPS \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438, \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0439\u0434\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0430? \n\n\u0421\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 WSUS \u2014 \u044d\u0442\u043e \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0434\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430: \u0443\u0447\u0451\u0442\u043a\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u0430, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0447\u0430\u0441\u0442\u043e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439.  \n\n\u041a\u043e\u043d\u0442\u0435\u043a\u0441\u0442 \u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\n- RCE \u0447\u0435\u0440\u0435\u0437 AuthorizationCookie \u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e BinaryFormatter. \u041d\u0443\u0436\u0435\u043d \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SOAP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0443 WSUS (\u043e\u0431\u044b\u0447\u043d\u043e 8530/8531).\n    \n- WSUS \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 AD \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u0435\u0441\u044c \u0434\u043e\u043c\u0435\u043d \u0438 \u043e\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f WSUS \u0434\u0430\u0451\u0442 \u0440\u044b\u0447\u0430\u0433\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f. \n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\nhttps://hawktrace.com/blog/CVE-2025-59287\n\n\u0420\u0430\u0437\u0431\u043e\u0440 PoC\n\u0413\u0435\u043d\u0435\u0440\u0438\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 BinaryFormatter (\u0432 Base64).\n\n\u0428\u0438\u0444\u0440\u0443\u0435\u043c: AES-128-CBC, \u043d\u0443\u043b\u0435\u0432\u043e\u0439 IV, \u043d\u0443\u043b\u0435\u0432\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0435 \u0432\u044b\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u043d\u0438\u0435, \u043f\u0435\u0440\u0432\u044b\u0439 \u0431\u043b\u043e\u043a \u2014 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 salt.\n\nBase64 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u043c \u043a\u0430\u043a \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 AuthorizationCookie.\n\n\u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f BinaryFormatter.Deserialize() \u0431\u0435\u0437 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u2014 gadget \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 SYSTEM \u0432\u043d\u0443\u0442\u0440\u0438 IIS/WSUS.\n\n??????\n\nPROFIT\nPOST /ClientWebService/Client.asmx HTTP/1.1\nHost: WSUS-SERVER:8530\nContent-Type: text/xml; charset=utf-8\nSOAPAction: \"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie\"\nContent-Length: 3632\n\n\n\n  \n    \n      \n        \n          SimpleTargeting\n          [GENERATED PAYLOAD]\n        \n      \n      \n      1.20\n    \n  \n\n\nPoC \nhttps://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951", "url": "https://t.me/ad_poheque/107"}, {"timestamp": "2026-08-14T10:00:06.472Z", "date_only": false, "value": "2026-08-14T10:00:06.472062Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "27e120c6-1e66-4ff8-9df6-37e2a94e3fdb"}, {"timestamp": "2026-08-15T10:00:11.643Z", "date_only": false, "value": "2026-08-15T10:00:11.643669Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b7745ed3-36d5-4ee8-a320-e5d3cf748654"}, {"timestamp": "2026-08-16T10:00:06.287Z", "date_only": false, "value": "2026-08-16T10:00:06.287009Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "269077db-eef3-48d6-895a-f2c029adb76a"}, {"timestamp": "2026-08-18T10:00:07.312Z", "date_only": false, "value": "2026-08-18T10:00:07.312086Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "41aa361a-08bb-4b0a-aafd-3adced4a2753"}, {"timestamp": "2026-08-19T21:00:07.684Z", "date_only": false, "value": "2026-08-19T21:00:07.684211Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/12", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "39c575d6-5eb1-4754-a2ba-b4519e1906fb", "content": "The attacker targeted Windows Servers with WSUS enabled, exploiting CVE-2025-59287 for initial access.", "url": "https://t.me/CyberDispatch/12"}, {"timestamp": "2026-08-19T21:00:08.912Z", "date_only": false, "value": "2026-08-19T21:00:08.912110Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/9", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "96dcf281-9e03-4ea6-a8f8-a5818f7f130b", "content": "Hackers are using a fixed Windows bug (CVE-2025-59287) to spread ShadowPad malware through WSUS servers.\n\nThey used normal Windows tools like curl and certutil to install it \u2014 a method seen before in Chinese hacking groups.\n\nSystems patched too late may have already been compromised.", "url": "https://t.me/CyberDispatch/9"}, {"timestamp": "2026-08-21T00:00:19.921Z", "date_only": false, "value": "2026-08-21T00:00:19.921274Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/9", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8d9788bc-ce33-4be5-85de-43e1af60f82d", "content": "Hackers are using a fixed Windows bug (CVE-2025-59287) to spread ShadowPad malware through WSUS servers.\n\nThey used normal Windows tools like curl and certutil to install it \u2014 a method seen before in Chinese hacking groups.\n\nSystems patched too late may have already been compromised.", "url": "https://t.me/CyberDispatch/9"}, {"timestamp": "2026-08-28T10:00:04.881Z", "date_only": false, "value": "2026-08-28T10:00:04.881378Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8f3159d0-2c15-441e-b4be-d60e68b1351d"}, {"timestamp": "2026-08-29T10:00:28.130Z", "date_only": false, "value": "2026-08-29T10:00:28.130172Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d8d01374-b02a-44d1-ac7c-1bf7d5fab66b"}, {"timestamp": "2026-09-01T10:00:07.610Z", "date_only": false, "value": "2026-09-01T10:00:07.610623Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-31)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e62fb917-dd66-446b-9187-a1875910b4d8"}, {"timestamp": "2026-09-01T20:00:17.407Z", "date_only": false, "value": "2026-09-01T20:00:17.407932Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/174245", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "598458cd-7753-4d09-a3a5-aa38216075e3", "content": "Weekly Purple Team Episode: CVE-2025-59287 - Exploiting & Detecting the Critical WSUS RCE\nhttps://www.reddit.com/r/redteamsec/comments/1oq0q6o/weekly_purple_team_episode_cve202559287/\n\nI've just released a new episode covering CVE-2025-59287, the unauthenticated WSUS RCE (CVSS 9.8) that has been actively exploited in the wild since late October. For those who haven't been tracking this issue: it's an unsafe deserialization flaw in Windows Server Update Services that allows remote attackers to execute SYSTEM-level code without authentication. CISA added it to the KEV catalog within 24 hours of confirmed exploitation, and we've seen everything from reconnaissance to infostealer deployment (Skuld) to pre-ransomware activity. \ud83d\udd34 Red Team Perspective:\n How easy this is to exploit.\n pre-built scripts for exploitation\n How the exploit works in detail.  \ud83d\udd35 Blue Team Perspective:\n Building robust detection rules for exploitation indicators\n Process telemetry analysis (wsusservice.exe \u2192 cmd.exe \u2192 powershell.exe)\n SIEM/EDR strategies for catching post-exploitation activity\n Many of the Sigma rules and writeups are incorrect on this one. Have a look. The goal is to show both how the attack works AND how to build detections that catch it - understanding the red side makes you better at blue.    submitted by    /u/Infosecsamurai  (https://www.reddit.com/user/Infosecsamurai) \n [link] (https://youtu.be/GKp9hnysMOE)   [comments] (https://www.reddit.com/r/redteamsec/comments/1oq0q6o/weekly_purple_team_episode_cve202559287/)", "url": "https://t.me/hacking_Attack/174245"}, {"timestamp": "2026-09-02T01:00:06.628Z", "date_only": false, "value": "2026-09-02T01:00:06.628797Z", "kind": "sighting", "label": "Seen", "source": "Telegram/H1cZoBEwIxRuGLLQI2TsowWL7FDXgkk_jbRWEUQrFo-NoE8", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "189cce69-ffe2-4260-8c29-328edc62a368"}, {"timestamp": "2026-09-02T06:00:14.379Z", "date_only": false, "value": "2026-09-02T06:00:14.379936Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/45635", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "14d00275-86ec-4e2f-9819-339d1d7f4c00", "content": "\ud83e\udde0 \ud83d\udd25 1. PoCs en GitHub \n\ud83e\uddea Radar autom\u00e1tico de PoCs (OBLIGATORIO)\n* [https://github.com/nomi-sec/PoC-in-GitHub]\n\n\ud83d\udc49 Qu\u00e9 hace:\n* Indexa miles de PoCs en tiempo real\n* Ideal para threat intel continuo\n\ud83e\udde0 Realidad:\n> Se publican cientos de exploits diarios antes que bases tradicionales \n\n\ud83d\udca5 WSUS RCE (deserializaci\u00f3n)\n* [https://github.com/dexterm300/cve-2025-59287-exploit-poc]\n\ud83d\udc49 Tipo:\n* RCE remoto sin autenticaci\u00f3n\n* abuso de BinaryFormatter\n\ud83e\udde0 Clave:\n* deserialization sigue siendo vector cr\u00edtico en enterprise \n\n \u2699\ufe0f Repo multi-CVE \n\n* [https://github.com/0xMarcio/cve]\n\ud83d\udc49 Incluye:\n* RCE\n* LPE\n* exploits web\n* scripts automatizados\n\ud83e\udde0 Insight:\n> Automatizaci\u00f3n de exploits ya es est\u00e1ndar\n\n \ud83e\udde0 PoC reciente (V8 / Chrome bug class)\n* [https://gist.github.com/Shreyas-Penkar/fae1c12d4a673f20698b62a2669f80e7]\n\ud83d\udc49 Tipo:\n* Type Confusion en motor JS\n\ud83e\udde0 Insight:\n* bugs de engine siguen siendo top-tier para RCE\n\n\ud83d\udc33 Container escape (lab + exploit)\n\n* [https://github.com/C-h4ck-0/Learn-about-cve-2025-31133-poc]\n\ud83d\udc49 T\u00e9cnica:\n* race condition en runc\n* abuso de maskedPaths\n\ud83e\udde0 Esto es potente:\n* rompe aislamiento de contenedores (nivel cloud) ([Reddit][5])\n\n \u26a0\ufe0f \ud83d\udd25 2. CVEs recientes con PoC o explotaci\u00f3n\n\n\u26a1 SSRF moderno explotable\n\n* [https://www.sentinelone.com/vulnerability-database/cve-2026-5016/]\n\ud83d\udc49 Tipo:\n* SSRF sin autenticaci\u00f3n\n\ud83e\udde0 Impacto:\n* pivot interno + exfiltraci\u00f3n ([SentinelOne][6])\n\n\ud83e\udde0 Copilot CLI vuln (nuevo vector AI)\n\n* [https://feedly.com/cve/CVE-2026-29783]\n\ud83d\udc49 Tipo:\n* command injection v\u00eda CLI\n\ud83e\udde0 Insight:\n* repos + instrucciones \u2192 vector de ataque\n\n\u26a0\ufe0f \ud83d\udc80 3. Lo oscuro (muy importante)\n\ud83e\udde8 Fake PoCs con malware\n\n* [https://www.uptycs.com/blog/threat-research-report-team/fake-poc-repositories-malicious-code-github]\n\ud83d\udc49 Qu\u00e9 pasa:\n* repos con \u201cPoCs\u201d \u2192 malware real\n\ud83e\udde0 Red flag:\n* links externos raros\n* payloads ocultos \n\n \ud83e\udde0 Dato brutal:\n\n> ~1.9% de PoCs en GitHub son maliciosos\n \ud83e\uddec \ud83d\udd25 4. Tendencias REALES (lo m\u00e1s valioso)\n\u26a1 Explotaci\u00f3n ultra r\u00e1pida\n* exploits en horas tras PoC\n  \ud83d\udc49 ejemplo real:\n* [https://www.reddit.com/r/pwnhub/comments/1r3xv33/hackers_target_beyondtrust_flaw_cve20261731/]\n\n\ud83e\udde0 Conclusi\u00f3n:\n> el tiempo entre CVE \u2192 ataque = horas\n\n\ud83e\udd16 AI generando exploits\n\n* [https://arxiv.org/abs/2602.05721]\n\ud83d\udc49 Lo importante:\n* generaci\u00f3n autom\u00e1tica de PoCs\n* pero muchos son inv\u00e1lidos (~70%)\n\ud83e\udde0 Insight:\n> a\u00fan no reemplaza al humano, pero acelera todo\n\ud83e\udde0 \ud83e\uddec 5. T\u00e9cnicas emergentes (nivel PRO)\nAqu\u00ed lo que realmente est\u00e1 pasando:\n\ud83e\udde9 Patch \u2192 exploit autom\u00e1tico\n* analizar diff \u2192 generar exploit\n\n \ud83d\udd73\ufe0f Fileless + runtime abuse\n* payloads en memoria\n* CI/CD pipelines\n\n\ud83d\udc33 Container escape (muy caliente)\n* runc\n* Kubernetes\n\n\ud83e\udde0 AI-assisted recon\n* scraping + payload din\u00e1mico\n\n \ud83e\uddec Supply chain weaponizado\n* repos infectados\n* dependencias maliciosas", "url": "https://t.me/HackingTeamGrupoOfficial/45635"}, {"timestamp": "2026-09-02T20:00:05.747Z", "date_only": false, "value": "2026-09-02T20:00:05.747037Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MDejoZgynr8LlPCfcHLGYynTe4-nNkLjRBMRCz_B_6ANtEs", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "5e93b6ef-14d4-4729-bfcf-d755a74e5074"}, {"timestamp": "2026-09-03T00:00:48.108Z", "date_only": false, "value": "2026-09-03T00:00:48.108786Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/45635", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "51d0c8f4-d96d-42d3-8dc7-8543dbd6a959", "content": "\ud83e\udde0 \ud83d\udd25 1. PoCs en GitHub \n\ud83e\uddea Radar autom\u00e1tico de PoCs (OBLIGATORIO)\n* [https://github.com/nomi-sec/PoC-in-GitHub]\n\n\ud83d\udc49 Qu\u00e9 hace:\n* Indexa miles de PoCs en tiempo real\n* Ideal para threat intel continuo\n\ud83e\udde0 Realidad:\n> Se publican cientos de exploits diarios antes que bases tradicionales \n\n\ud83d\udca5 WSUS RCE (deserializaci\u00f3n)\n* [https://github.com/dexterm300/cve-2025-59287-exploit-poc]\n\ud83d\udc49 Tipo:\n* RCE remoto sin autenticaci\u00f3n\n* abuso de BinaryFormatter\n\ud83e\udde0 Clave:\n* deserialization sigue siendo vector cr\u00edtico en enterprise \n\n \u2699\ufe0f Repo multi-CVE \n\n* [https://github.com/0xMarcio/cve]\n\ud83d\udc49 Incluye:\n* RCE\n* LPE\n* exploits web\n* scripts automatizados\n\ud83e\udde0 Insight:\n> Automatizaci\u00f3n de exploits ya es est\u00e1ndar\n\n \ud83e\udde0 PoC reciente (V8 / Chrome bug class)\n* [https://gist.github.com/Shreyas-Penkar/fae1c12d4a673f20698b62a2669f80e7]\n\ud83d\udc49 Tipo:\n* Type Confusion en motor JS\n\ud83e\udde0 Insight:\n* bugs de engine siguen siendo top-tier para RCE\n\n\ud83d\udc33 Container escape (lab + exploit)\n\n* [https://github.com/C-h4ck-0/Learn-about-cve-2025-31133-poc]\n\ud83d\udc49 T\u00e9cnica:\n* race condition en runc\n* abuso de maskedPaths\n\ud83e\udde0 Esto es potente:\n* rompe aislamiento de contenedores (nivel cloud) ([Reddit][5])\n\n \u26a0\ufe0f \ud83d\udd25 2. CVEs recientes con PoC o explotaci\u00f3n\n\n\u26a1 SSRF moderno explotable\n\n* [https://www.sentinelone.com/vulnerability-database/cve-2026-5016/]\n\ud83d\udc49 Tipo:\n* SSRF sin autenticaci\u00f3n\n\ud83e\udde0 Impacto:\n* pivot interno + exfiltraci\u00f3n ([SentinelOne][6])\n\n\ud83e\udde0 Copilot CLI vuln (nuevo vector AI)\n\n* [https://feedly.com/cve/CVE-2026-29783]\n\ud83d\udc49 Tipo:\n* command injection v\u00eda CLI\n\ud83e\udde0 Insight:\n* repos + instrucciones \u2192 vector de ataque\n\n\u26a0\ufe0f \ud83d\udc80 3. Lo oscuro (muy importante)\n\ud83e\udde8 Fake PoCs con malware\n\n* [https://www.uptycs.com/blog/threat-research-report-team/fake-poc-repositories-malicious-code-github]\n\ud83d\udc49 Qu\u00e9 pasa:\n* repos con \u201cPoCs\u201d \u2192 malware real\n\ud83e\udde0 Red flag:\n* links externos raros\n* payloads ocultos \n\n \ud83e\udde0 Dato brutal:\n\n> ~1.9% de PoCs en GitHub son maliciosos\n \ud83e\uddec \ud83d\udd25 4. Tendencias REALES (lo m\u00e1s valioso)\n\u26a1 Explotaci\u00f3n ultra r\u00e1pida\n* exploits en horas tras PoC\n  \ud83d\udc49 ejemplo real:\n* [https://www.reddit.com/r/pwnhub/comments/1r3xv33/hackers_target_beyondtrust_flaw_cve20261731/]\n\n\ud83e\udde0 Conclusi\u00f3n:\n> el tiempo entre CVE \u2192 ataque = horas\n\n\ud83e\udd16 AI generando exploits\n\n* [https://arxiv.org/abs/2602.05721]\n\ud83d\udc49 Lo importante:\n* generaci\u00f3n autom\u00e1tica de PoCs\n* pero muchos son inv\u00e1lidos (~70%)\n\ud83e\udde0 Insight:\n> a\u00fan no reemplaza al humano, pero acelera todo\n\ud83e\udde0 \ud83e\uddec 5. T\u00e9cnicas emergentes (nivel PRO)\nAqu\u00ed lo que realmente est\u00e1 pasando:\n\ud83e\udde9 Patch \u2192 exploit autom\u00e1tico\n* analizar diff \u2192 generar exploit\n\n \ud83d\udd73\ufe0f Fileless + runtime abuse\n* payloads en memoria\n* CI/CD pipelines\n\n\ud83d\udc33 Container escape (muy caliente)\n* runc\n* Kubernetes\n\n\ud83e\udde0 AI-assisted recon\n* scraping + payload din\u00e1mico\n\n \ud83e\uddec Supply chain weaponizado\n* repos infectados\n* dependencias maliciosas", "url": "https://t.me/HackingTeamGrupoOfficial/45635"}, {"timestamp": "2026-09-03T00:00:58.856Z", "date_only": false, "value": "2026-09-03T00:00:58.856862Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H1cZoBEwIxRuGLLQI2TsowWL7FDXgkk_jbRWEUQrFo-NoE8", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ebc4714a-bab4-4bf4-a073-1eb70f8896ce"}, {"timestamp": "2026-09-03T03:00:06.590Z", "date_only": false, "value": "2026-09-03T03:00:06.590143Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/174245", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "df263956-4291-438f-895d-ab81ac011065", "content": "Weekly Purple Team Episode: CVE-2025-59287 - Exploiting & Detecting the Critical WSUS RCE\nhttps://www.reddit.com/r/redteamsec/comments/1oq0q6o/weekly_purple_team_episode_cve202559287/\n\nI've just released a new episode covering CVE-2025-59287, the unauthenticated WSUS RCE (CVSS 9.8) that has been actively exploited in the wild since late October. For those who haven't been tracking this issue: it's an unsafe deserialization flaw in Windows Server Update Services that allows remote attackers to execute SYSTEM-level code without authentication. CISA added it to the KEV catalog within 24 hours of confirmed exploitation, and we've seen everything from reconnaissance to infostealer deployment (Skuld) to pre-ransomware activity. \ud83d\udd34 Red Team Perspective:\n How easy this is to exploit.\n pre-built scripts for exploitation\n How the exploit works in detail.  \ud83d\udd35 Blue Team Perspective:\n Building robust detection rules for exploitation indicators\n Process telemetry analysis (wsusservice.exe \u2192 cmd.exe \u2192 powershell.exe)\n SIEM/EDR strategies for catching post-exploitation activity\n Many of the Sigma rules and writeups are incorrect on this one. Have a look. The goal is to show both how the attack works AND how to build detections that catch it - understanding the red side makes you better at blue.    submitted by    /u/Infosecsamurai  (https://www.reddit.com/user/Infosecsamurai) \n [link] (https://youtu.be/GKp9hnysMOE)   [comments] (https://www.reddit.com/r/redteamsec/comments/1oq0q6o/weekly_purple_team_episode_cve202559287/)", "url": "https://t.me/hacking_Attack/174245"}, {"timestamp": "2026-09-03T10:00:08.435Z", "date_only": false, "value": "2026-09-03T10:00:08.435817Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "cd7c8f25-0619-414a-aadd-5bd3974dcff2"}, {"timestamp": "2026-09-03T18:00:06.209Z", "date_only": false, "value": "2026-09-03T18:00:06.209316Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itrussia_darknet/98", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b0ee46ca-c896-42d3-8bb0-def6f6cc91d0", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE\u20112025\u201159287 \u0432 Windows Server Update Services (WSUS) \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287 (\u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 WSUS) \u2014 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.  \n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Huntress Labs, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0443\u0436\u0435 \u0441 23 \u043e\u043a\u0442\u044f\u0431\u0440\u044f: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 WSUS-\u0438\u043d\u0441\u0442\u0430\u043d\u0441\u044b (\u043f\u043e\u0440\u0442\u044b 8530/8531) \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 Crafted \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 cookie.  \n\u0422\u0430\u043a\u0436\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities 24 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.  \n\u0412\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443: WSUS \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 Windows-\u0441\u0440\u0435\u0434\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0434\u0447\u0438\u043d\u0451\u043d\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.  \n\n\u041d\u0430\u0448\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b:\n\u0410\u043d\u0442\u0438\u0448\u043f\u0438\u043e\u043d \n==========\nCyberDark \n==========\n\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411\n================\nIT ARMY OF RUSSIA", "url": "https://t.me/itrussia_darknet/98"}, {"timestamp": "2026-09-04T00:00:39.603Z", "date_only": false, "value": "2026-09-04T00:00:39.603178Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itrussia_darknet/98", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "feb0e833-5e5a-4974-92c3-b31913db63d1", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE\u20112025\u201159287 \u0432 Windows Server Update Services (WSUS) \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59287 (\u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 WSUS) \u2014 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.  \n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Huntress Labs, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0443\u0436\u0435 \u0441 23 \u043e\u043a\u0442\u044f\u0431\u0440\u044f: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 WSUS-\u0438\u043d\u0441\u0442\u0430\u043d\u0441\u044b (\u043f\u043e\u0440\u0442\u044b 8530/8531) \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 Crafted \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 cookie.  \n\u0422\u0430\u043a\u0436\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities 24 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.  \n\u0412\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443: WSUS \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 Windows-\u0441\u0440\u0435\u0434\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0434\u0447\u0438\u043d\u0451\u043d\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.  \n\n\u041d\u0430\u0448\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b:\n\u0410\u043d\u0442\u0438\u0448\u043f\u0438\u043e\u043d \n==========\nCyberDark \n==========\n\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411\n================\nIT ARMY OF RUSSIA", "url": "https://t.me/itrussia_darknet/98"}, {"timestamp": "2026-09-05T10:00:13.860Z", "date_only": false, "value": "2026-09-05T10:00:13.860284Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "3c05c607-736e-41df-8944-e4eb86ea686e"}, {"timestamp": "2026-09-09T05:00:09.306Z", "date_only": false, "value": "2026-09-09T05:00:09.306019Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/2807", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "49218a7b-6e66-4bf0-a14d-f8a842adbcad", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS: \u0430\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 ShadowPad\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Windows Server Update Services (WSUS). \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2025-59287, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0442\u0435\u0441\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT-\u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b AhnLab Security Intelligence Center (ASEC) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2025 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-20 12:15 | Author: SEC-1275\n\n#wsus #shadowpad #general_cyber_news\n\nhttps://1275.ru/ioc/kitayskie-hakery-atakuyut-korporativnye-seti-cherez-uyazvimost-v-wsus-analiz-novoy-kampanii-s-shadowpad_16427", "url": "https://t.me/Intel_Encyclopedia/2807"}, {"timestamp": "2026-09-09T05:00:16.795Z", "date_only": false, "value": "2026-09-09T05:00:16.795339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1626", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "710dda8d-c7d4-45c6-b95a-6662df2b8379", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WSUS CVE-2025-59287: \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Server Update Service (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Darktrace \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0421\u0428\u0410, \u0433\u0434\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0435 \u043e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439. WSUS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-04 08:36 | Author: SEC-1275\n\n#cve202559287 #vulnerabilities__exploits #wsus\n\nhttps://1275.ru/ioc/kriticheskaya-uyazvimost-wsus-cve-2025-59287-analiz-post-ekspluatatsionnoy-aktivnosti_15900", "url": "https://t.me/Intel_Encyclopedia/1626"}, {"timestamp": "2026-09-09T05:00:16.870Z", "date_only": false, "value": "2026-09-09T05:00:16.870852Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1541", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "e6cab00e-657a-4a0b-8da9-7ebf600a8ad1", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nHackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287\n\n\u2014\n\nSummary:\nSecurity researchers at the SANS Internet Storm Center have detected a significant spike in suspicious network traffic targeting Windows Server Update Services (WSUS) infrastructure worldwide. The reconnaissance activity focuses specifically on TCP ports 8530 and 8531, which correspond to unencrypted and encrypted communication channels for WSUS servers vulnerable to the recently disclosed CVE-2025-59287. This coordinated [\u2026]\nThe post Hackers Actively Scanning TCP Ports 8530/8531 for WSUS...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-03 14:00 | Author: Divya\n\n#actively #hackers #vulnerabilities__exploits\n\nhttps://gbhackers.com/hackers-actively-scanning-tcp-ports-8530-8531/", "url": "https://t.me/Intel_Encyclopedia/1541"}, {"timestamp": "2026-09-09T05:00:17.149Z", "date_only": false, "value": "2026-09-09T05:00:17.149081Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1449", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "7cf5a144-4fa8-465b-a191-91652e0220bc", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nScans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287, (Sun, Nov 2nd)\n\n\u2014\n\nSummary:\nSensors reporting firewall logs detected a significant increase in scans for port 8530/TCP and 8531/TCP over the course of last week. Some of these reports originate from Shadowserver, and likely other researchers, but there are also some that do not correspond to known research-related IP addresses.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-02 17:50\n\n#port #scans #vulnerabilities__exploits\n\nhttps://isc.sans.edu/diary/rss/32440", "url": "https://t.me/Intel_Encyclopedia/1449"}, {"timestamp": "2026-09-09T05:00:17.329Z", "date_only": false, "value": "2026-09-09T05:00:17.329612Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1420", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9929b48d-e010-4df4-92d8-fa56c238212c", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nAttackers Exploit Windows Server Update Services Flaw to Steal Sensitive Organizational Data\n\n\u2014\n\nSummary:\nSophos researchers have identified real-world exploitation of a newly disclosed vulnerability in Windows Server Update Services (WSUS), where threat actors are harvesting sensitive data from organizations worldwide. The critical remote code execution flaw, tracked as CVE-2025-59287, has become a prime target for attackers seeking to breach enterprise networks and extract valuable information without authentication requirements. [\u2026]\nThe post Attackers Exploit Windows Server Update Services...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-10-31 13:44 | Author: Divya\n\n#exploit #vulnerabilities__exploits #attackers\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1420"}, {"timestamp": "2026-09-09T05:00:17.437Z", "date_only": false, "value": "2026-09-09T05:00:17.437450Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1380", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "53227229-1e14-42d7-b8e4-ed4f8c7d75d7", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-59287\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 Windows Server Update Services (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 ClientWebService. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-10-31 16:19 | Author: SEC-1275\n\n#server #vulnerabilities__exploits #windows\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1380"}, {"timestamp": "2026-09-10T00:00:25.345Z", "date_only": false, "value": "2026-09-10T00:00:25.345838Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1380", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "f897be86-c425-42f7-9cb4-03da78a84538", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows Server: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-59287\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 Windows Server Update Services (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 ClientWebService. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-10-31 16:19 | Author: SEC-1275\n\n#server #vulnerabilities__exploits #windows\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1380"}, {"timestamp": "2026-09-10T00:00:25.462Z", "date_only": false, "value": "2026-09-10T00:00:25.462007Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1420", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "eadc7181-6400-4f59-a20a-ce5629221b2e", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nAttackers Exploit Windows Server Update Services Flaw to Steal Sensitive Organizational Data\n\n\u2014\n\nSummary:\nSophos researchers have identified real-world exploitation of a newly disclosed vulnerability in Windows Server Update Services (WSUS), where threat actors are harvesting sensitive data from organizations worldwide. The critical remote code execution flaw, tracked as CVE-2025-59287, has become a prime target for attackers seeking to breach enterprise networks and extract valuable information without authentication requirements. [\u2026]\nThe post Attackers Exploit Windows Server Update Services...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-10-31 13:44 | Author: Divya\n\n#exploit #vulnerabilities__exploits #attackers\n\nView Article", "url": "https://t.me/Intel_Encyclopedia/1420"}, {"timestamp": "2026-09-10T00:00:34.042Z", "date_only": false, "value": "2026-09-10T00:00:34.042279Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1541", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "eac8208d-d93c-4284-a886-3017fa2fe1ea", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nHackers Actively Scanning TCP Ports 8530/8531 for WSUS CVE-2025-59287\n\n\u2014\n\nSummary:\nSecurity researchers at the SANS Internet Storm Center have detected a significant spike in suspicious network traffic targeting Windows Server Update Services (WSUS) infrastructure worldwide. The reconnaissance activity focuses specifically on TCP ports 8530 and 8531, which correspond to unencrypted and encrypted communication channels for WSUS servers vulnerable to the recently disclosed CVE-2025-59287. This coordinated [\u2026]\nThe post Hackers Actively Scanning TCP Ports 8530/8531 for WSUS...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-03 14:00 | Author: Divya\n\n#actively #hackers #vulnerabilities__exploits\n\nhttps://gbhackers.com/hackers-actively-scanning-tcp-ports-8530-8531/", "url": "https://t.me/Intel_Encyclopedia/1541"}, {"timestamp": "2026-09-10T00:00:34.549Z", "date_only": false, "value": "2026-09-10T00:00:34.549102Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Intel_Encyclopedia/1626", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "ab968255-38ea-485b-b02b-dd52d8de3e5c", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WSUS CVE-2025-59287: \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Server Update Service (WSUS), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-59287. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Darktrace \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u0421\u0428\u0410, \u0433\u0434\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-59287 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0435 \u043e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439. WSUS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-04 08:36 | Author: SEC-1275\n\n#cve202559287 #vulnerabilities__exploits #wsus\n\nhttps://1275.ru/ioc/kriticheskaya-uyazvimost-wsus-cve-2025-59287-analiz-post-ekspluatatsionnoy-aktivnosti_15900", "url": "https://t.me/Intel_Encyclopedia/1626"}, {"timestamp": "2026-09-10T00:00:46.075Z", "date_only": false, "value": "2026-09-10T00:00:46.075807Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/2807", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "56f799cf-cab8-492d-8290-5e09fc0e88e3", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WSUS: \u0430\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 ShadowPad\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Windows Server Update Services (WSUS). \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2025-59287, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0442\u0435\u0441\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT-\u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b AhnLab Security Intelligence Center (ASEC) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2025 [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-20 12:15 | Author: SEC-1275\n\n#wsus #shadowpad #general_cyber_news\n\nhttps://1275.ru/ioc/kitayskie-hakery-atakuyut-korporativnye-seti-cherez-uyazvimost-v-wsus-analiz-novoy-kampanii-s-shadowpad_16427", "url": "https://t.me/Intel_Encyclopedia/2807"}, {"timestamp": "2026-09-11T10:00:11.776Z", "date_only": false, "value": "2026-09-11T10:00:11.776750Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b6ffb537-935f-4681-a1d8-e1229ab59af6"}, {"timestamp": "2026-09-13T14:16:38.454Z", "date_only": false, "value": "2026-09-13T14:16:38.454545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/luahai.bsky.social/post/3mvfrvi3wcs2u", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d1d263b1-cc28-4716-9e06-b335fc75f852", "content": "Most AI tools hallucinate CVEs and give you broken exploits with total confidence. I asked Luah AI to research a critical vulnerability and generate a working PoC. This is what it returned, still early, but the self-checking part is interesting. (CVE-2025-59287) #AI #Cyber #Hacking", "url": "https://bsky.app/profile/luahai.bsky.social/post/3mvfrvi3wcs2u"}, {"timestamp": "2026-09-14T06:59:12.820Z", "date_only": false, "value": "2026-09-14T06:59:12.820193Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9b401603-3e42-4e47-a01c-b873bc7fcf54", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n"}, {"timestamp": "2026-09-14T10:00:06.150Z", "date_only": false, "value": "2026-09-14T10:00:06.150532Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "9d40d17b-e4ef-486f-8f7b-443eab1e9f08"}, {"timestamp": "2026-09-15T10:00:10.488Z", "date_only": false, "value": "2026-09-15T10:00:10.488224Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0450d4a9-8c8e-491f-81eb-ec9cee041ce1"}, {"timestamp": "2026-09-17T10:00:07.892Z", "date_only": false, "value": "2026-09-17T10:00:07.892076Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0e3e9682-7a4a-413e-a03b-a436ced32507"}, {"timestamp": "2026-09-19T10:00:08.112Z", "date_only": false, "value": "2026-09-19T10:00:08.112416Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a1272058-638c-4f78-9782-7d28e07624d4"}, {"timestamp": "2026-09-26T00:00:00Z", "date_only": false, "value": "2026-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-26)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "90b68c82-dec8-4206-a595-6051323cfc82"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-28)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "a6273af5-1fca-4c30-a4be-6236c470d6be"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-29)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b9b91c37-4bcc-453b-b0b5-cdcf632e4f6b"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-30)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "8e3cbea8-cff5-4046-89d5-c73858e8d2fa"}, {"timestamp": "2026-10-04T00:00:00Z", "date_only": false, "value": "2026-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-04)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "b194f658-eee0-4fe8-8449-3f07beb28f37"}, {"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-10)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "2cc358de-1f7f-43a6-9e23-7273affd7ca3"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-12)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "0d74b138-e095-4b59-ab9f-9ee1f81720b0"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-13)", "record": "CVE-2025-59287", "field": "creation_timestamp", "uuid": "d90a4a7c-c6bb-43e2-91f8-a4a1307bfdcb"}]}