Cybersecurity News | Daily Recap [10 Nov 2025]

Daily Recap, Widespread ClickFix phishing targets hotel systems alongside the reappearance of GlassWorm on Open VSX and GitHub, with LANDFALL Android malware exploiting a Samsung 0-day in WhatsApp images. The report also covers runc container flaws, OWASP Top 10 updates, and rising enterprise risks across IoT and mobile devices.
#ClickFix #GlassWorm #LANDFALL #Samsung0day #OWASPTop10 #IoT #IlluminateFine #TISZABreach

Malware & Campaigns

Widespread campaigns deliver PureRAT via ClickFix phishing against hotel systems, the GlassWorm malware resurfaces in Open VSX and GitHub, and new LANDFALL Android malware exploits a Samsung 0‑day hidden in WhatsApp images. – ClickFix Phish, GlassWorm Return, LANDFALL Android

Vulnerabilities & Patches

Critical runc vulnerabilities can enable container escape to host root, QNAP issues patches for 20+ flaws disclosed at Pwn2Own Ireland, and an Amazon WorkSpaces Linux bug can expose user tokens. – Runc Escape, QNAP Patches, WorkSpaces Flaw

Standards & Policy

The OWASP Top 10 for 2025 adds two new web-app risk categories with Broken Access Control still leading and supply-chain issues rising. – OWASP Top10
A proposed short-term renewal of the CISA 2015 cyber information-sharing law appears in a bill to end the government shutdown. – Info Sharing Bill
OWASP announces a new AI Vulnerability Scoring System to address gaps in CVSS for AI-specific flaws. – AI Scoring

Emerging Threats & Enterprise Risk

A new browser security report outlines emerging risks for enterprises, highlighting web-based attack vectors and enterprise exposure. – Browser Report
A new Microsoft Teams feature raises concerns that it could increase exposure to phishing and malware for users and organizations. – Teams Risk
Security firms warn of a surge in attacks targeting IoT and mobile devices within critical infrastructure environments. – IoT Surge

Incidents & Enforcement

A Nevada ransomware incident was traced to an employee downloading malware, underscoring insider-driven compromise vectors. – Ransomware Trace
The TISZA data breach appears in Have I Been Pwned’s registry, exposing affected users. – TISZA Breach
Illuminate Education was fined $5.1M for failing to protect student data following a breach. – Illuminate Fine
A China APT used DLL sideloading in a months-long espionage campaign against a US policy nonprofit, and Australia sanctioned hackers supporting North Korea‘s weapons program. – China APT, Australia Sanctions
A Russian missile barrage disrupted internet connectivity and customs databases in Ukraine, impacting communications infrastructure. – Ukraine Outage

Events, Resources & Guides

Europe hosted the first in-orbit satellite cybersecurity competition, a milestone for space-focused security research and training. – Satellite CTF
Weekly threat research and recaps summarizing current activity are available for further situational awareness. – Weekly Recap
India rolled out Digital Life Certificate 4.0 and urged pensioners to follow cybersecurity best practices for online services. – Digital Certificate
A practical guide explains how to use the new Windows 11 Start menu as it rolls out to users. – Windows 11 Start

Cybersecurity News | Daily Recap – hendryadrian.com