10/31

Australia warns of BadCandy infections on unpatched Cisco devices

https://www.bleepingcomputer.com/news/security/australia-warns-of-badcandy-infections-on-unpatched-cisco-devices/
Australia warns of BadCandy infections on unpatched Cisco devices

BRONZE BUTLER exploits Japanese asset management software vulnerability – Sophos News

https://news.sophos.com/en-us/2025/10/30/bronze-butler-exploits-japanese-asset-management-software-vulnerability/
BRONZE BUTLER exploits Japanese asset management software vulnerability – Sophos News

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html
CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

Ukrainian extradited from Ireland on Conti ransomware charges

https://www.bleepingcomputer.com/news/security/ukrainian-extradited-from-ireland-on-conti-ransomware-charges/
Ukrainian extradited from Ireland on Conti ransomware charges

Japan Issues OT Security Guidance for Semiconductor Factories - SecurityWeek

https://www.securityweek.com/japan-issues-ot-security-guidance-for-semiconductor-factories/
Japan Issues OT Security Guidance for Semiconductor Factories - SecurityWeek

Windows zero-day actively exploited to spy on European diplomats

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-windows-zero-day-to-spy-on-european-diplomats/
Windows zero-day actively exploited to spy on European diplomats

Abusing tclsh to Load (Remote) Shellcode on macOS | CodeColorist

https://codecolor.ist/2025/10/31/macos-abuse-tcl-lol/?reload=
Abusing tclsh to Load (Remote) Shellcode on macOS | CodeColorist

CISA: High-severity Linux flaw now exploited by ransomware gangs

https://www.bleepingcomputer.com/news/security/cisa-linux-privilege-escalation-flaw-now-exploited-in-ransomware-attacks/
CISA: High-severity Linux flaw now exploited by ransomware gangs

Google says Search AI Mode will know everything about you

https://www.bleepingcomputer.com/news/google/google-says-search-ai-mode-will-know-everything-about-you/
Google says Search AI Mode will know everything about you

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

https://thehackernews.com/2025/10/nation-state-hackers-deploy-new.html
Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

https://thehackernews.com/2025/10/cisa-and-nsa-issue-urgent-guidance-to.html
CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

OPSEC: Read the Code Before It Burns Your Op | BlackSnufkin

https://blacksnufkin.github.io/posts/opsec-offensive-code-review/
OPSEC: Read the Code Before It Burns Your Op | BlackSnufkin

Alleged Meduza Stealer malware admins arrested after hacking Russian org

https://www.bleepingcomputer.com/news/security/alleged-meduza-stealer-malware-admins-arrested-after-hacking-russian-org/
Alleged Meduza Stealer malware admins arrested after hacking Russian org

Three Buddy Problem Episode 70 Livestream - YouTube

https://www.youtube.com/watch?v=7IkmOXujJTY
Three Buddy Problem Episode 70 Livestream - YouTube

Microsoft Edge gets scareware sensor for faster scam detection

https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-gets-scareware-sensor-for-faster-scam-detection/
Microsoft Edge gets scareware sensor for faster scam detection

‘We got hacked’ emails threaten to leak University of Pennsylvania data

https://www.bleepingcomputer.com/news/security/offensive-we-got-hacked-emails-sent-in-penn-security-incident/
‘We got hacked’ emails threaten to leak University of Pennsylvania data

Massive surge of NFC relay malware steals Europeans’ credit cards

https://www.bleepingcomputer.com/news/security/massive-surge-of-nfc-relay-malware-steals-europeans-credit-cards/
Massive surge of NFC relay malware steals Europeans’ credit cards

China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems

https://thehackernews.com/2025/10/china-linked-tick-group-exploits.html
China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems