Visual Studio Code malware, Sinkholes reversal, Chinese pen-testing & FortiSIEM zero-day / Intel Chat [#286]

North Korean threat actors are targeting macOS software developers in a new malware campaign that abuses Visual Studio Code (VS Code) confi gurations to deliver JavaScript-based backdoors, according to research from Jamf.

Sinkholes are usually seen as the end of a malicious campaign - the point where domains are seized and abuse stops.

China’s pen-testing and red-team ecosystem has always been hard to observe, especially since many teams stopped participating in international CTFs post-2018.

A critical zero-day vulnerability, CVE-2025-64155, has been discovered in Fortinet’s FortiSIEM platform by Horizon3.ai, allowing unauthenticated remote code execution and privilege escalation to root.