ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.
The creator of a popular Sims 4 update has taken the tool offline for good, confirming their departure in a brief statement to users.
The vulnerability in question is CVE-2025-11001 (CVSS score: 7.0), which allows remote attackers to execute arbitrary code.