China-linked tick group exploits Lanscope zero-day to take over corporate systems

October 31, 2025Ravi LakshmananEndpoint security/cyber espionage The recently revealed exploitation of a critical security flaw in Motex Lanscope Endpoint Manager is believed to be the work of a cyber espionage group known as Tick. This vulnerability is tracked as CVE-2025-61932 (CVSS score: 9.3) and allows remote attackers to execute arbitrary commands with SYSTEM privileges on […]

MSP Cybersecurity Readiness Guide: Turn security into growth

October 31, 2025hacker newsBusiness continuity/risk management MSPs face increasing customer expectations for strong cybersecurity and compliance outcomes while threats become more complex and regulatory demands evolve. Meanwhile, clients are increasingly demanding comprehensive protection without the burden of managing security themselves. This change means great growth opportunities. By offering advanced cybersecurity and compliance services, MSPs can […]

2025 Beaver Moon: Don’t miss this year’s biggest and brightest ‘supermoon’

Skywatchers will see the year’s largest and brightest full moon next week. The Beaver Moon, which will be full on Wednesday, November 5th at 8:19 a.m. ET, will be the second of three consecutive supermoons to occur in 2025. This year’s largest supermoon will be approximately 221,818 miles (356,980 kilometers) from Earth, making it the […]

CISA and NSA issue emergency guidance to protect WSUS and Microsoft Exchange servers

October 31, 2025Ravi LakshmananVulnerability/Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA), along with international partners in Australia and Canada, have released guidance for hardening on-premises Microsoft Exchange Server instances from potential abuse. “By restricting administrative access, implementing multi-factor authentication, enforcing strict transport security configurations, and adopting Zero […]

Eclipse Foundation revokes leaked open VSX tokens following Wiz discovery

October 31, 2025Ravi LakshmananMalware/Secure Coding The Eclipse Foundation, which manages the open source Open VSX project, said it has taken steps to revoke a small number of tokens that were leaked within a Visual Studio Code (VS Code) extension published in the marketplace. This action follows a report from cloud security firm Wiz earlier this […]

CISA warns that VMware zero-day was exploited in active attack by China-linked hackers

October 31, 2025Ravi LakshmananVulnerability/Cyber ​​attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw affecting Broadcom VMware Tools and VMware Aria Operations to its Known Exploited Vulnerabilities (KEV) catalog after receiving reports of it being exploited in the wild. The vulnerability in question, CVE-2025-41244 (CVSS score: 7.8), could be […]

TechCrunch Disrupt Scene | TechCrunch

Thank you to everyone who made this year’s San Francisco event what it was, and to the 10,000 people who filled the halls, made connections, and walked away with more than they expected. Couldn’t you? The image below shows part of the story. Until next year. Vinod Khosla told attendees he disagreed with the argument […]

macOS’s new security layer targets admin errors before hackers

October 31, 2025hacker newsEndpoint security/network security A design company is editing a new campaign video on a MacBook Pro. A creative director opens a collaboration app that quietly requests microphone and camera permissions. MacOS is supposed to flag this, but the checks are lax in this case. The app gets access anyway. Another Mac in […]

Navan IPO falls 20% after historic debut as SEC closure avoidance strategy

Corporate travel and expense platform Navan closed its first day of trading on the Nasdaq Thursday down 20% from its $25 IPO price, valuing the 10-year-old company at about $4.7 billion. The company is the first to apply new SEC rules that allow it to go public during the government shutdown. Unlike the traditional IPO […]