Windows Task Scheduler

China doesn't want to be beholden to some US-based business that could insert spyware and stuff into the loads, the images that the Chinese government is using, that's it.

Windows task host flaw used by ransomware operators.

Back in November, 2025, Microsoft patched a Windows privilege escalation flaw that targeted the Windows task host component.

Even though it's been patched, threat actors are still targeting this high severity vulnerability.

CISA has now confirmed that ransomware groups are actively exploring the flaw since at least April, although they were light on further details.

Once exploited, attackers with any kind of user permissions can further gain system privileges to take full control of devices.

CISA added the flaw to its known exploited vulnerabilities catalog late last week, but Microsoft has not yet updated its security advisory to confirm exploitation in the wild.

All right, Windows Taskos vulnerability again.