“`html
Threat perpetrators associated with the Play ransomware group utilized a newly addressed security vulnerability in Microsoft Windows as a zero-day during an assault on an unspecified organization in the United States.
According to the Symantec Threat Hunter Group, which is part of Broadcom, the attack exploited CVE-2025-29824, a privilege elevation flaw in the Common Log File System (CLFS) driver. It was rectified by
“`