Play-Ransomware uses Windows Zero-Day vulnerability

According to Symantec, the ransomware group Play and allied groups exploit the zero-day vulnerability CVE-2025-29824. Although the vulnerability was patched by Microsoft on April 8th, there are still unpatched and therefore vulnerable systems. The Play-Ransomware group has exploited a previously unknown zero-day vulnerability in Windows to gain higher system rights. According to a report by Symantec, the attackers targeted the CVE-2025-29824 vul…