Cybersecurity News | Daily Recap [03 Nov 2025]

hendryadrian.com

hendryadrian.com

Vulnerabilities & Bugs

• Ransomware actors are actively exploiting the CVE-2024-1086 flaw in the Linux kernel to deploy malware and escalate incidents – Linux CVE
• A new BOF tool can bypass Microsoft Teams cookie encryption to steal user chats, raising secure-messaging concerns – Teams BOF
• Google awarded security researchers $100,000 for two Chrome vulnerabilities as part of its bug bounty program – Chrome Rewards
• Some users report that Windows Task Manager won’t close after installing update KB5067036, indicating a problematic patch rollout – Task Manager Bug

APTs & State-backed Campaigns

• Operation SkyCloak and related campaigns have targeted Russian/Belarusian military assets using LNK exploits and an OpenSSH-over-Tor backdoor to maintain stealthy access – SkyCloak, Belarus Backdoor, UNC6384 PlugX
• North Korean APTs upgraded tooling: Kimsuky leverages stealthy HttpTroy while Lazarus fields a new BLINDINGCAN RAT in targeted operations – NK APTs

Critical Infrastructure & Logistics

• PNP is hardening cybersecurity defenses ahead of potential DDoS threats to protect public services and communications – DDoS Prep
• Reports show hackers are targeting Britain‘s drinking water suppliers and regulators are tracking incidents affecting water-sector security – UK Water
• Cybercriminals are exploiting remote monitoring and management tools to infiltrate logistics and freight networks, increasing supply-chain disruption risk – Logistics RMM

Data Breaches & Privacy

• Conduent’s January 2025 incident exposed records affecting over 10M+ people in a large-scale data breach disclosure – Conduent Breach
• A hacker claims to have stolen some 1.2 million donor records from the University of Pennsylvania, raising concerns about donor-data protection – Penn Leak
• Sling TV agreed to pay a $530,000 settlement for violating California privacy law after regulatory action – Sling Settlement

Supply Chain & Software Security

• Open VSX rotated compromised access tokens after a supply-chain malware incident, highlighting risks in package ecosystems and token management – Open VSX

AI Risks & Governance

• Professor Zico Kolter was named to lead an OpenAI safety panel with authority to halt unsafe model releases, shaping AI governance oversight – Zico Kolter
• Researchers warn that Claude AI APIs can be abused for data exfiltration, demonstrating emergent risks in generative-AI platforms – Claude Exfil
• The cybersecurity community is debating whether CISO burnout is an epidemic, endemic, or inevitable as stress and attrition rates rise across security teams – CISO Burnout

Research & SOC Operations

• Continuous Exposure Management is being promoted as a core approach to transform SOC workflows and reduce detection-to-remediation time – SOC Evolution
• Weekly threat research summaries and recaps continue to track emerging campaigns and indicators for SOC/TI teams to consume – Threat Recap

Cybersecurity News | Daily Recap – hendryadrian.com