China-Linked Actors Exploit Windows & VMware Zero-Days; Ransomware Gangs Hit Major Corporations
China-Linked Actors Exploit Windows & VMware Zero-Days; Ransomware Gangs Hit Major Corporations
Summary
This cybersecurity brief for November 1, 2025, covers a surge in state-sponsored cyber-espionage and critical zero-day exploitation. Chinese-linked threat actors are actively leveraging an unpatched Windows vulnerability (CVE-2025-9491) to spy on European diplomats and a now-patched VMware flaw (CVE-2025-41244) for privilege escalation. Concurrently, ransomware remains a dominant threat, with the Akira group claiming a breach at Apache OpenOffice, RansomHouse hitting Japanese retailer Askul, and a massive data breach at Conduent affecting over 10.5 million individuals. Other significant developments include the discovery of new malware families 'KYBER' and 'Airstalk', a supply chain attack on the npm registry, and an ongoing campaign targeting Cisco devices in Australia.
Filter by Category
New Articles (5)
Updated Articles (2)
📢 Share This Publication
Help others stay informed about cybersecurity threats
📅 Daily Edition
Curated and deduplicated every day from dozens of trusted sources — giving you one clean, consolidated view of what matters in cybersecurity.
🔢 Deduplication Applied
Related stories are merged into a single evolving article rather than repeated as separate entries — cutting through noise so you only read what's new.
🔗 Full Articles Linked
Every entry links to its full enriched article — complete with MITRE ATT&CK mappings, extracted IOCs, and actionable detection and mitigation guidance.