BleepingComputer.com
"GlassWorm malware returns an open VSX with 3 new VSCode extensions."
Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 09 November 2025, 1212 UTC.
Content and Source: "BleepingComputer.com."
URL-- https://www.bleepingcomputer.com/
Please check URL or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
OpenAI plans to release GPT-5.1, GPT-5.1 Reasoning, and GPT-5.1 Pro
OpenAI is preparing the GPT-5.1 family for public rollout. This includes GPT-5.1 (base), GPT-5.1 Reasoning, and GPT-5.1 Pro for those who pay a $200 monthly subscription.
- November 08, 2025
- 05:29 PM
0
GlassWorm malware returns on OpenVSX with 3 new VSCode extensions
The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with three new VSCode extensions that have already been downloaded over 10,000 times.
- November 08, 2025
- 11:17 AM
- 0
-
A checklist for securing Google Workspace.
Set it and forget it? Not when it comes to Google Workspace security. This guide covers essential steps you can take to improve your security posture today. Review these 5 key settings on a regular basis to avoid identity security risks.
Still on Windows 10? Enroll in free ESU before next week’s Patch Tuesday
With the first Patch Tuesday following Windows 10's end of support approaching next week, users who continue to run the operating system should enroll in the Extended Security Updates (ESU) program to remain protected against newly discovered security vulnerabilities.
- November 08, 2025
- 10:09 AM
- 1
Gain expertise in AI and automation in this $25 course deal
The ChatGPT & Automation E-Degree is your gateway to mastering the tools that are redefining productivity, creativity, and efficiency across industries. And it's on sale for just $24.97 (MSRP $790) for a limited time.
- November 08, 2025
- 08:07 AM
- 0
Malicious NuGet packages drop disruptive 'time bombs'
Several malicious packages on NuGet have sabotage payloads scheduled to activate in 2027 and 2028, targeting database implementations and Siemens S7 industrial control devices.
- November 07, 2025
- 03:53 PM
- 0
Microsoft testing faster Quick Machine Recovery in Windows 11
Microsoft is testing a faster version of Quick Machine Recovery (QMR) and updated Smart App Control (SAC), allowing users to toggle it without requiring a Windows clean install.
- November 07, 2025
- 02:46 PM
- 2
QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own
QNAP has fixed seven zero-day vulnerabilities that security researchers exploited to hack QNAP network-attached storage (NAS) devices during the Pwn2Own Ireland 2025 competition.
- November 07, 2025
- 01:24 PM
- 1
New LandFall spyware exploited Samsung zero-day via WhatsApp messages
A threat actor exploited a zero-day vulnerability in Samsung's Android image processing library to deploy a previously unknown spyware called 'LandFall' using malicious images sent over WhatsApp.
- November 07, 2025
- 01:23 PM
- 0
Cisco: Actively exploited firewall flaws now abused for DoS attacks
Cisco warned this week that two vulnerabilities, which have been exploited in zero-day attacks, are now being abused to force ASA and FTD firewalls into reboot loops.
- November 07, 2025
- 10:44 AM
- 0
ID verification laws are fueling the next wave of breaches
ID laws are forcing companies to store massive amounts of sensitive data, turning compliance into a security risk. Acronis explains how integrated backup and cybersecurity platforms help MSPs reduce complexity and close the gaps attackers exploit.
- November 07, 2025
- 10:05 AM
- 0
Leak confirms Google Gemini 3 Pro and Nano Banana 2 could launch soon
Google is planning to ship two new models. One is Gemini 3, which is optimised for coding and regular use, and the second is Nano Banano 2 for generating realistic images.
- November 07, 2025
- 08:06 AM
- 0
This $180 MS Surface laptop is a great early Black Friday deal
If you've been holding out for a Black Friday tech deal, this might be it. The Microsoft Surface SE 11.6″ Laptop is down to $179.97 (MSRP: $329) — and it's everything you need for work, school, or everyday use without the price tag of a flagship device.
- November 07, 2025
- 07:11 AM
- 0
U.S. Congressional Budget Office hit by suspected foreign cyberattack
The U.S. Congressional Budget Office (CBO) confirms it suffered a cybersecurity incident after a suspected foreign hacker breached its network, potentially exposing sensitive data.
- November 06, 2025
- 07:22 PM
- 1
AI-Slop ransomware test sneaks on to VS Code marketplace
A malicious extension with basic ransomware capabilities seemingly created with the help of AI, has been published on Microsoft's official VS Code marketplace.
- November 06, 2025
- 04:52 PM
- 0
How a ransomware gang encrypted Nevada government's systems
The State of Nevada has completed its recovery from a ransomware attack it suffered on August 24, 2025, which impacted 60 state agencies, disrupting critical services related to health and public safety.
- November 06, 2025
- 02:02 PM
- 3
A compact, durable $55 refurbished Chromebook that gets the job done
If you've ever wished for an extra laptop to keep around the house — something to check email, pay bills, shop online, or stream your favorite shows — this is it. The Lenovo 11.6″ 100e Chromebook (2nd Gen) is that perfect grab-and-go machine you don't have to overthink. It's compact, fast, and just $54.99 (MSRP $328.99)
- November 06, 2025
- 02:02 PM
- 1
Continuous Purple Teaming: Turning Red-Blue Rivalry into Real Defense
Red and blue teams often operate independently, but attackers don't. Picus Security shows how continuous purple teaming and BAS turn red-blue rivalry into real defense, validating controls and closing gaps in real time.
- November 06, 2025
- 10:02 AM
- 0
ClickFix malware attacks evolve with multi-OS support, video tutorials
ClickFix attacks have evolved to feature videos that guide victims through the self-infection process, a timer to pressure targets into taking risky actions, and automatic detection of the operating system to provide the correct commands.
- November 06, 2025
- 09:00 AM
- 0
Critical Cisco UCCX flaw lets attackers run commands as root
Cisco has released security updates to patch a critical vulnerability in the Unified Contact Center Express (UCCX) software, which could enable attackers to execute commands with root privileges.
- November 06, 2025
- 08:31 AM
- 0
Get started in coding and using ChatGPT with this $35 course deal
The Premium Learn to Code Certification Bundle includes 15 courses across languages such as Python 3, Java, Flutter, and Dart, as well as working with, not against, ChatGPT. Grab lifelong access on sale at $34.97 for a limited time (MSRP $1,500).
- November 06, 2025
- 07:09 AM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.