Windows Server Update Services

Named by 3 kept items in this workspace.

2 items name it under affected products and 1 under classification.technologies.

Search every workspace for Windows Server Update Services. It matches the name as written, so it can find other things that share it.

The items that name it 3

The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
articleas classification.technologies2026-10-13
Velociraptor Misuse, Pt. II: The Eye of the Storm
writeupas affected products2025-12-03It is written here as Windows Server Update Services (WSUS).
Targeted via CVE-2025-59287 for initial access in a separate November 12 incident (part one of the series) and referenced in the Warlock ransom note
Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?
writeupas affected products2025-11-20It is written here as Windows Server Update Services (WSUS).
Microsoft's centralized update distribution service; vulnerable to deserialization RCE (CVE-2025-59287) when exposed publicly on default ports; patched as of October 23

All technologies in this workspace.