The Cybersecurity and Infrastructure Security Agency (CISA) has mandated that all U.S. Federal Civilian Executive Branch (FCEB) agencies address a critical vulnerability in the Microsoft Streaming Service (MSKSSRV.SYS), which is currently being exploited in attacks. The flaw, tracked as CVE-2023-29360, stems from an untrusted pointer dereference, allowing local attackers to obtain SYSTEM privileges without needing user interaction from the victim, posing a significant threat due to its low complexity. Initially discovered by Thomas Imbert of Synactiv and reported through Trend Micro’s Zero Day Initiative, Microsoft issued a fix in June 2023. Despite the absence of evidence linking the flaw to ransomware attacks, CISA has included it in its Known Exploited Vulnerabilities (KEV) catalog, emphasizing the urgent need for federal agencies to apply the patch by no later than March 21, 2024. This directive, underlining the risk to the federal enterprise, extends to private organizations globally to prevent future exploitations. Notably, Check Point revealed that the Raspberry Robin malware, known since September 2021 and associated with various cybercrime groups, has exploited this vulnerability since August 2023, demonstrating the exploit’s accessibility and the rapid adoption by malicious actors. CTIX analysts recommend that users ensure they are running the latest Windows update to prevent the exploitation of this vulnerability.