⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

The Hacker News’ weekly recap highlights a busy week in which Microsoft released out-of-band patches for CVE-2025-59287, a critical WSUS flaw now under active exploitation that drops a .NET executable and Base64 PowerShell payload on infected hosts. It also reports LockBit 5.0’s return, with Check Point noting multiple victims across Western Europe, the Americas, and Asia as affiliates encrypt files with a new multi‑platform version and a 30‑day data‑publishing deadline.

Other notable items include a modified Telegram Android app delivering the Baohuo backdoor, which can steal data and surveil Telegram activity, and a widening F5 breach that Bloomberg says began in 2023 and only came to light in August 2025. The roundup also covers a range of other security stories, from WordPress exploits toAzure Blob Storage abuse, and notes ongoing criminal activity by threat actors and nation‑state‑linked groups. Overall, the piece reinforces the message that a persistent, multi‑faceted threat landscape requires constant vigilance and proactive defence.