In Other News: LockBit 5.0, Department of War Cybersecurity Framework, OnePlus Vulnerability

In Other News: LockBit 5.0 has been released after a law enforcement crackdown, with Trend Micro researchers analysing Windows, Linux and ESXi variants that use randomized 16-character file extensions, are configured to avoid Russian-language systems, and clear event logs after encryption. Rapid7 disclosed technical details of a OnePlus vulnerability (CVE-2025-10184) affecting OxygenOS, and OnePlus said it is investigating after Rapid7 published its findings.

The article also highlights the US Department of War unveiling a new cybersecurity framework, the Cybersecurity Risk Management Construct (CSRMC), described as a five-phase, ten-tenet framework designed to embed cybersecurity into every stage of system development and operations for real‑time defence. According to the US Department of War, the CSRMC aims to modernise cyber defenses by replacing manual processes with a dynamic, automated approach to continuous monitoring. Taken together, these items illustrate ongoing moves by both threat actors and defenders to change the risk landscape across platforms and organisations.