Hackers Exploit Windows MMC Zero-Day Vulnerability to Execute Malicious Code

A sophisticated campaign by Russian threat actors exploiting a critical zero-day vulnerability in the Microsoft Management Console (MMC). The vulnerability, CVE-2025-26633, allows attackers to bypass security features and execute malicious code on targeted systems. Trend Research identified the Russian hacking group Water Gamayun (also known as EncryptHub and Larva-208) as the primary threat actor behind […]

The post Hackers Exploit Windows MMC Zero-Day Vulnerability to Execute Malicious Code appeared first on Cyber Security News.