CISA, Microsoft warn of Windows zero-day used in attack on ‘major’ Turkish defense org

Microsoft has addressed a critical Windows vulnerability, CVE-2025-33053, exploited by a sophisticated hacking group targeting Middle Eastern and African governments. The attack involved phishing and remote code execution via WebDAV, highlighting advanced espionage tactics. #CVE2025-33053 #StealthFalcon

Keypoints

Microsoft issued a patch for a Windows zero-day vulnerability used in targeted attacks.
The vulnerability affects the WebDAV component, exploited through malicious URLs in phishing emails.
Check Point linked the campaign to the Stealth Falcon hacking group with UAE ties.
Stealth Falcon utilizes custom malware, zero-day exploits, and stealthy delivery methods.
The attack primarily targeted government and defense entities in Middle Eastern and African countries.