China Upgrades the Backdoor It Uses to Spy on Telcos Globally

A batch of DarkReading stories highlights an intensifying threat landscape: China-linked APT Red Menshen has upgraded a stealthy BPFdoor backdoor to spy on telcos globally, while multiple critical flaws and supply-chain compromises are being actively exploited (e.g., Langflow code-injection, Oracle Fusion Middleware RCE, Trivy/Checkmarx KICS supply-chain incidents). Ransomware gangs targeted Cisco firewalls, infostealers and trojans spread via poisoned GitHub/npm packages, and abused IP cameras and commercial spyware markets expand. The collection also flags systemic risks from AI (agentic/LLM