CVE-2025-59287 is under active exploitation as threat actors hit exposed WSUS servers. Microsoft remains silent as risks escalate.