China Upgrades the Backdoor It Uses to Spy on Telcos Globally

A batch of DarkReading stories highlights a surge in high-impact and nation-state tooling, plus widening supply-chain and AI-enabled attack vectors. Notable items include Red Menshen's new BPFdoor backdoor targeting global telcos, critical/exploited vulnerabilities and ransomware activity (Oracle Fusion Middleware RCE, Interlock targeting Cisco firewalls), multiple supply-chain compromises (Trivy, Checkmarx KICS, malicious GitHub/OpenClaw packages), active exploitation of a critical Langflow code‑injection flaw, and focused malware against crypto wallets (SnappyClient). The feed also flags the