⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Summary: A suspected Chinese espionage actor tracked as Tick exploited a critical flaw in Motex Lanscope Endpoint Manager (CVE-2025-61932, CVSS 9.3) to breach networks and deploy a backdoor called Gokcpdoor, according to Sophos, which said the activity was limited to sectors aligned with the actor's intelligence objectives. The weekly roundup also lists newly critical vulnerabilities including CVE-2025-55315 in QNAP NetBak PC Agent, CVE-2025-10680 in OpenVPN, CVE-2025-55752 and CVE-2025-55754 in Apache Tomcat, and CVE-2025-10932 in Progress MOVEit Transfer.
Bottom line: A 9.3-rated flaw in an endpoint management tool is a direct path into the networks of the sectors Tick targets, and the roundup notes attackers often exploit new vulnerabilities within hours of disclosure.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-10680 CVE-2025-10932 CVE-2025-11621 CVE-2025-11705 CVE-2025-12044 CVE-2025-12080 CVE-2025-12450 CVE-2025-24893 CVE-2025-43995 CVE-2025-49401 CVE-2025-52665 CVE-2025-54603 CVE-2025-55315 CVE-2025-55680 CVE-2025-55752 CVE-2025-55754 CVE-2025-5842 CVE-2025-61932 CVE-2025-62725 CVE-2025-6325 CVE-2025-6327
Related: CVE-2025-24893: XWiki Platform Eval Injection Vulnerability Known Exploited Vulnerabilities · Oct 30, 2025
CVE-2025-61932: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Known Exploited Vulnerabilities · Oct 22, 2025
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens Cyber Risks ·