A newly discovered vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to remotely crash servers with zero user interaction. By exploiting the UDP-based TFTP service, attackers can spoof packets and exhaust server memory without authentication. This poses a significant risk to organizations relying on WDS, especially as Microsoft hasn’t issued a patch or mitigation strategies.

96% of businesses have low cyber-readiness, claims Cisco
The 2025 Cisco Cybersecurity Readiness Index reveals that a significant number of global businesses are unprepared for increasing threats related to AI.