CybersecuritySoftware

WSUS Zero-Day Exploits Spread as Microsoft Scrambles to Contain Critical Server Flaw

Attackers are actively exploiting a critical Windows Server Update Services vulnerability that allows complete system takeover with a single request. Despite Microsoft’s emergency patch, security researchers warn the fix may be incomplete as government agencies issue alerts about ongoing exploitation campaigns.

Emergency Patch Fails to Fully Contain Critical WSUS Vulnerability

Microsoft is facing mounting pressure as security researchers and government agencies report active exploitation of a critical Windows Server vulnerability that the company has now patched twice in recent weeks. The flaw in Windows Server Update Services (WSUS), tracked as CVE-2025-59287, carries a near-maximum 9.8 CVSS score and allows unauthenticated attackers to execute arbitrary code on vulnerable systems.

InnovationSoftware

Microsoft Releases Windows 11 Preview Build 27951 Addressing System Crashes and Authentication Glitches

Microsoft has launched Windows 11 Insider Preview Build 27951, targeting persistent system crashes and authentication issues. The update arrives as the Windows Insider program marks its 11th anniversary with special wallpapers.

Latest Windows 11 Preview Build Targets System Stability

Microsoft has released a new Windows 11 preview build for Canary Channel testers, according to reports from the company’s development team. Build 27951 focuses primarily on resolving system instability issues rather than introducing new features, sources indicate.

CybersecuritySoftware

Critical Windows SMB Vulnerability Actively Exploited Despite Patch Availability

Federal cybersecurity officials confirm active exploitation of a high-severity Windows SMB vulnerability months after Microsoft released patches. The flaw, rated 8.8 on the CVSS scale, enables attackers to escalate privileges and move laterally within compromised networks. Organizations are urged to apply June 2025 security updates immediately.

Active Exploitation Confirmed

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity vulnerability in Microsoft’s Windows SMB client is now being actively exploited in the wild, according to reports. The flaw, tracked as CVE-2025-33073, was added to CISA’s Known Exploited Vulnerabilities catalog on October 20, indicating that threat actors are successfully leveraging the vulnerability in ongoing campaigns despite patches being available since June 2025.

AISoftware

Claude Code Democratizes Programming with Web and Mobile Access

Anthropic has expanded access to its Claude Code programming tool to anyone with a web browser or smartphone, according to reports. The company claims the tool has increased engineer productivity by 67% and is generating substantial annual revenue since its general availability in May 2025.

Programming Tool Reaches Wider Audience

Anthropic has reportedly made its Claude Code programming tool accessible to virtually anyone with internet access, according to recent announcements. The expansion marks a significant shift in who can leverage advanced coding capabilities, with sources indicating the tool is no longer limited to specialized terminals and local development environments.