Syntacks Consulting

As the year draws to a close, we would like to thank our clients, partners and community for your trust and continued support throughout the year.

We appreciate the opportunity to work with you and to help strengthen your technology, security and operations. Your collaboration and confidence in our team drive everything we do.

We wish you a safe and enjoyable Christmas and a well-earned break over the holiday period. We look forward to continuing our work together in the new year.

Microsoft has identified the following vulnerability in the Microsoft Windows Server Update Service:

CVE-2025-59287: This vulnerability involves deserialisation of untrusted data in WSUS, which could enable an unauthenticated actor to achieve remote code ex*****on with system privileges. The ASD’s ACSC recommends that organisations take immediate action to address affected products.
The vulnerability impacts Microsoft Windows Server Update Service in Windows Server (2012, 2016, 2019, 2022 and 2025).

A critical file upload vulnerability (CVE-2024-53677) has been identified in the Apache Struts2 Framework that could allow path traversal, malicious file upload and lead to remote code ex*****on.

Reach out to Syntacks support by raising a ticket to get help or email [email protected].

www.syntacks.com.au/contact

Send a message to learn more