SecurityCybercriminals Exploit Windows Task Host Vulnerability for Ransomware Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware groups are actively exploiting a critical vulnerability in the Windows Task Host component. Tracked as CVE-2025-60710, this flaw allows attackers with basic user rights to escalate privileges to SYSTEM level, granting full control over compromised devices. While Microsoft patched the issue in November 2025, CISA added it to its catalog of actively exploited vulnerabilities in April, mandating federal agencies to apply fixes within two weeks.
Read more













