How Stealth Falcon Abused WebDAV Zero-Day CVE-2025-33053 Before Microsoft’s Patch

On the last cumulative patch of June Microsoft has addressed several issue. One of the most important is the vulnerability of WebDAV tagged as CVE-2025-33053. Before the patch APT group Stealth Falcon abuse the undisclosed technique to execute files hosted on a WebDAV server they controlled. A pratical example on how zero-days are impacting security everyday.