OS-WINDOWS Microsoft Windows SPNEGO Extended Negotiation remote code execution attempt

Description

Detects an attempt to exploit CVE-2025-47981, a remote code execution flaw that can run code on the target in Microsoft Windows SPNEGO Extended Negotiation.

CVEs

Related malware families

References

• msrc.microsoft.com →