Security Affairs newsletter Round 548 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 548 by Pierluigi Paganini – INTERNATIONAL EDITION was published on 2 November 2025, according to Security Affairs. The weekly roundup gathers a selection of international security articles, including items such as BadCandy Webshell threatening unpatched Cisco IOS XE devices, UNC6384 exploiting a Windows zero-day to spy on European diplomats, and Old Linux Kernel flaw CVE-2024-1086 resurfacing in ransomware attacks.

It also highlights EY exposing 4TB of SQL Server backups on Microsoft Azure, suspected Chinese actors compromising Ribbon Communications, and CISA adding XWiki Platform and VMware-related flaws to its Known Exploited Vulnerabilities catalog.

Additional links cover a brush exploit collapsing Chromium browsers, a former defence contractor executive pleading guilty to selling exploits to Russia, Merkle’s data exposure after a cyberattack, and hacktivists breaching Canada’s critical infrastructure, among other stories such as the alleged Sandworm connection to Ukrainian targets and ongoing discussions around 2FA re-enrolment timelines. The newsletter also includes references to further security news and embedded international press items.