Patch Fatigue & Laptop Farms

**Hosts**

- Professor CyberRisk

- Cyber Cowboy

**Live Cyber Maps**

- Bitdefender Threat Map: https://threatmap.bitdefender.com/

- Check Point Threat Map: https://threatmap.checkpoint.com/

- Kaspersky Cyber Threat Map: https://cybermap.kaspersky.com/

- Talos Intelligence ebc_spam Map: https://talosintelligence.com/ebc_spam

**Episode Information**  _Title:_ Patch Fatigue & Laptop Farms  _Episode Number:_ 315 (3x15)

**Overview** This week, we explore the weakening foundation of global vulnerability databases, Microsoft’s massive patch release, a North Korean infiltration campaign, Rust-based malware targeting gamers, and a silent threat to developer ecosystems. From CI pipelines to “laptop farms,” threat actors are getting creative — and we’re unpacking what it means for the future of cybersecurity.

**Guest Information** None this episode

**Top Stories** 🔸 _Global Vulnerability Databases Are Cracking_ NVD’s 25K+ vulnerability backlog and CVE’s near-collapse signal deep trouble. CISA’s “Vulnrichment” aims to decentralize enrichment, but public trust is deteriorating. → Why It Matters:

- C 🔗 https://www.iwebbs.com/newsletter/july-2025-cybersecurity-newsletter/

🔸 _Microsoft Patches 130 Flaws — No Zero-Days_ July’s Patch Tuesday resolved 130 vulnerabilities including a wormable SPNEGO flaw (CVSS 9.8). Zero-day drought continues, with RCE and escalation attacks surging. → Why It Matters:

-” 🔗 https://www.cybersecurity-review.com/news-july-2025/

🔸 _North Korean IT Worker Scheme Dismantled_ DOJ busted a sprawling DPRK operation using fake identities to infiltrate 100+ U.S. companies. 21 “laptop farms” across 14 states fueled $900K in crypto funding. → Why It Matters:

-” 🔗 https://www.iwebbs.com/newsletter/july-2025-cybersecurity-newsletter/

🔸 _Myth Stealer Targets Gamers & Browsers_ Rust-based malware spreads via fake cheat tools, collecting credentials and autofill data. A free Telegram drop evolved into a full MaaS operation. → Why It Matters:

- 🔗 https://www.secmentis.com/news/

🔸 _CI Flaw in Open VSX Threatens Millions of Devs_ A flaw in Open VSX Registry’s CI pipeline exposed millions of VS Code users to silent compromise. Platforms like Gitpod and Google Cloud Shell were at risk. → Why It Matters:

- https://www.iwebbs.com/newsletter/july-2025-cybersecurity-newsletter/

**Additional Cybersecurity News – Titles and URLs** None this episode

**Resources & Links** None this episode

**Call to Action**

- Subscribe: Stay updated on cybersecurity threats.

- Leave a Review: Let us know what you think.

- Join the Conversation: Follow our community and ask questions.

**Sponsor (if applicable)** No sponsors this episode

**Podcast Socials & Website**

- Website: https://www.youvealreadybeenhacked.com

- X: @professorcyberrisk

- YouTube: https://www.youtube.com/@YABHPodcast

- Discord/Community Forum: coming soon