Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware
18 August 2025
Cybersecurity researchers have lifted the lid on the threat actors' exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic malware in RansomExx ransomware attacks.
The attacks involve the exploitation of CVE-2025-29824, a privilege escalation vulnerability impacting the Windows Common Log File System (CLFS) that was addressed by Microsoft in April 2025,