CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups

CISA confirmed that a privilege escalation vulnerability in Windows Task Host (CVE-2025-60710) is actively exploited by ransomware groups to achieve SYSTEM-level control, accelerating ransomware deployment and lateral movement on Windows 11 and Server 2025 systems.

This Wire brief sits within Fusion42's coverage of Cybersecurity.