CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/cisa-windows-task-host-flaw-now-exploited-by-ransomware-gangs-ppmpu0

2026-09-10 05:00 UTC[low]

Cybercriminals are building phishing pages that exist only inside victims’ browsers

Help Net Securityphishing windows

2026-09-09 21:25 UTC[info]

CISA head says agency must change quickly to prevent the 'worst that could happen'

The Recordcisa

2026-09-09 20:55 UTC[med]

4 groups caught using the same Chrome and Windows exploit kit

Ars Technicaai windows patch

2026-09-09 16:34 UTC[med]

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

The Hacker Newsapt windows

2026-09-09 15:31 UTC[high]

Veradigm warns of patient data breach after ransomware gang claims attack

BleepingComputerransomware data-breach

2026-09-09 12:00 UTC[med]

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesCVE-2025-25249CVE-2026-19490cve cisa