CISA warns of Microsoft Streaming bug exploited in malware attacks

CISA directed U.S. federal agencies to urgently patch CVE-2023-29360, a Microsoft Streaming Service (MSKSSRV.SYS) local privilege escalation bug that can yield SYSTEM privileges; the flaw was patched in June 2023, a public PoC appeared in September, and CISA added it to its Known Exploited Vulnerabilities catalog. Check Point reported Raspberry Robin malware campaigns have exploited the vulnerability since August 2023, and organizations are advised to prioritize remediation to prevent active exploitation.