The Daily Index — Wednesday, November 5, 2025 · TLDR Index

Continued

TLDR InfoSec — continued

TLDR InfoSec

Register now.

Summary unavailable

huntress.com

TLDR InfoSec

NEON CYBER (PRODUCT LAUNCH)

Neon Cyber protects organizations by embedding a browser extension on managed devices, providing real-time protection against phishing and insider threats. It delivers deep visibility into user actions in the browser, following threats and giving analysts a complete forensic context without adding user friction.

neoncyber.com

TLDR InfoSec

MALICIOUS VSX EXTENSION "SLEEPYDUCK" USES ETHEREUM TO KEEP ITS COMMAND SERVER ALIVE

The SleepyDuck malware, disguised as a legitimate Solidity extension for Visual Studio Code, uses an innovative Ethereum smart contract-based command and control infrastructure to maintain persistent access even if primary servers are taken down. The malware activates when opening .sol files, connects to Ethereum RPC providers to communicate with contract address 0xDAfb81732db454DA238e9cFC9A9Fe5fb8e34c465, and polls for commands every 30 seconds while collecting system information and providing remote access capabilities. Security professionals should implement strict extension vetting processes, monitor network traffic for Ethereum RPC connections originating from development environments, and establish policies that require extensions to be sourced only from verified publishers with established reputations.

thehackernews.com · 2 min

TLDR InfoSec

US CYBERSECURITY EXPERTS INDICTED FOR BLACKCAT RANSOMWARE ATTACKS

Three former cybersecurity incident response professionals from DigitalMint and Sygnia face federal indictment for allegedly operating as BlackCat/ALPHV ransomware affiliates, attacking five US organizations between May and November 2023 with ransom demands ranging from $300,000 to $10 million. The defendants exploited their insider positions as ransomware negotiators and incident response managers to gain unauthorized network access, steal data, deploy encryption malware, and demand cryptocurrency payments while only successfully extracting $1.27 million from one Tampa medical device manufacturer. Security teams should scrutinize third-party incident response providers and implement strict access controls. This case highlights the severe risk of insider threats when trusted security professionals abuse privileged access for financial gain.

bleepingcomputer.com · 2 min

TLDR InfoSec

MIT SLOAN QUIETLY SHELVES AI RANSOMWARE STUDY AFTER RESEARCHER CALLS BS

MIT Sloan has withdrawn a paper claiming that over 80% of ransomware attacks are AI-driven following strong criticism by cybersecurity experts who found its claims unsubstantiated and its evidence lacking. Critics argued the research exaggerated AI's role in cyberattacks and pointed to possible conflicts of interest, causing MIT to promise an updated version.

theregister.com · 3 min

TLDR InfoSec

MICROSOFT: PATCH FOR WSUS FLAW DISABLED WINDOWS SERVER HOTPATCHING

Microsoft's emergency patch, KB5070881, for the actively exploited CVE-2025-59287 WSUS remote code execution vulnerability inadvertently disabled hotpatching on Windows Server 2025 systems, forcing affected organizations to choose between vulnerability remediation and zero-downtime patching capabilities until the corrected KB5070893 update or the January 2026 baseline becomes available.

bleepingcomputer.com · 2 min

TLDR InfoSec

APPLE PATCHES 19 WEBKIT VULNERABILITIES

Apple released iOS 26.1 and macOS Tahoe 26.1, patching over 100 vulnerabilities, including 19 WebKit browser engine flaws (many found by Google's Big Sleep AI).

securityweek.com · 2 min

TLDR InfoSec

APACHE OPENOFFICE DISPUTES DATA BREACH CLAIMS BY RANSOMWARE GANG

The Apache Software Foundation has denied the Akira ransomware gang's claims of breaching Apache OpenOffice and stealing 23GB of employee information, financial data, and internal files.

bleepingcomputer.com · 2 min