Tag: china
-
Four charged over alleged plot to smuggle Nvidia AI chips into China
Prosecutors say front companies, falsified paperwork, and overseas drop points used to dodge US export rules First seen on theregister.com Jump to article: www.theregister.com/2025/11/21/nvidia_china_smuggling_charges/
-
Four charged over alleged plot to smuggle Nvidia AI chips into China
Prosecutors say front companies, falsified paperwork, and overseas drop points used to dodge US export rules First seen on theregister.com Jump to article: www.theregister.com/2025/11/21/nvidia_china_smuggling_charges/
-
FCC rolls back cybersecurity rules for telcos, despite state-hacking risks
The Federal Communications Commission (FCC) has rolled back a previous ruling that required U.S. telecom carriers to implement stricter cybersecurity measures following the massive hack from the Chinese threat group known as Salt Typhoon. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fcc-rolls-back-cybersecurity-rules-for-telcos-despite-state-hacking-risks/
-
China’s ‘PlushDaemon’ Hackers Infect Routers to Hijack Software Updates
A unique take on the software update gambit has allowed Beijing’s state-sponsored advanced persistent threat (APT) to evade attention as it mostly targets Chinese organizations. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/chinese-apt-routers-hijack-software-updates
-
China’s ‘PlushDaemon’ Hackers Infect Routers to Hijack Software Updates
A unique take on the software update gambit has allowed Beijing’s state-sponsored advanced persistent threat (APT) to evade attention as it mostly targets Chinese organizations. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/chinese-apt-routers-hijack-software-updates
-
China’s ‘PlushDaemon’ Hackers Infect Routers to Hijack Software Updates
A unique take on the software update gambit has allowed Beijing’s state-sponsored advanced persistent threat (APT) to evade attention as it mostly targets Chinese organizations. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/chinese-apt-routers-hijack-software-updates
-
4 People Indicted in Alleged Conspiracy to Smuggle Supercomputers and Nvidia Chips to China
A federal prosecutor alleged that one defendant boasted that his father “had engaged in similar business for the Chinese Communist Party.” First seen on wired.com Jump to article: www.wired.com/story/smuggling-supercomputers-china-nvidia-indictment/
-
Four Indicted In Alleged Conspiracy To Smuggle Supercomputers and Nvidia Chips to China
A federal prosecutor alleged one defendant boasted that his father “had engaged in similar business for the Chinese Communist Party.” First seen on wired.com Jump to article: www.wired.com/story/smuggling-supercomputers-china-nvidia-indictment/
-
Google exposes BadAudio malware used in APT24 espionage campaigns
China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-exposes-badaudio-malware-used-in-apt24-espionage-campaigns/
-
Chinese APT Infects Routers to Hijack Software Updates
A unique take on the software update gambit has allowed PlushDaemon to evade attention as it mostly targets Chinese organizations. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/chinese-apt-routers-hijack-software-updates
-
Cisco Pledges More Security in Network Equipment
Company to Warn Customers, Disable Insecure Options by Default. Cisco says it will proactively alert network administrators when insecure configurations are detected and will eventually disable insecure features by default. The move comes after Chinese hackers exploited known vulnerabilities in Cisco equipment during major telecom breaches. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisco-pledges-more-security-in-network-equipment-a-30079
-
Cisco Pledges More Security in Network Equipment
Company to Warn Customers, Disable Insecure Options by Default. Cisco says it will proactively alert network administrators when insecure configurations are detected and will eventually disable insecure features by default. The move comes after Chinese hackers exploited known vulnerabilities in Cisco equipment during major telecom breaches. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisco-pledges-more-security-in-network-equipment-a-30079
-
FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches
The Republican-led FCC voted to remove cybersecurity rules for telecom companies that were put in place before Donald Trump’s inauguration as a response to 2024 breaches attributed to state-backed Chinese hackers. First seen on therecord.media Jump to article: therecord.media/fcc-removes-biden-era-cybersecurity-rules-telecoms-salt-typhoon
-
TP-Link accuses rival Netgear of ‘smear campaign’ over alleged China ties
Networking vendor claims rival helped portray it as a national-security risk in the US First seen on theregister.com Jump to article: www.theregister.com/2025/11/20/tplink_sues_netgear/
-
TP-Link accuses rival Netgear of ‘smear campaign’ over alleged China ties
Networking vendor claims rival helped portray it as a national-security risk in the US First seen on theregister.com Jump to article: www.theregister.com/2025/11/20/tplink_sues_netgear/
-
China”‘linked PlushDaemon hijacks DNS via ‘EdgeStepper’ to weaponize software updates
Hijacked update to backdoor deployment: With the network device serving as a stealthy redirect, PlushDaemon then exploits the hijacked update channel to gain access to end-systems. ESET observed how typical victim software (such as a Chinese input-method application) issues an HTTP GET to its update server, but because DNS was hijacked, the request lands at…
-
Chinese APT Group Exploits DLL Sideloading to Breach Government and Media Targets
A China-nexus advanced persistent threat (APT) group has been conducting a sustained espionage campaign targeting government and media sectors across Southeast Asia, leveraging sophisticated DLL sideloading techniques as a primary attack vector. The threat actor, tracked as Autumn Dragon, has targeted multiple nations surrounding the South China Sea, including Indonesia, Singapore, the Philippines, Cambodia, and Laos,…
-
WhatsApp flaw allowed discovery of the 3.5 billion mobile numbers registered to the platform
Tags: api, attack, bug-bounty, business, china, cloud, dark-web, data, data-breach, encryption, flaw, government, mobile, phishing, phone, privacy, spam, technology, vulnerability, windowsHey there You are using WhatsApp, marks this as one of the most embarrassing weaknesses yet in the world’s most widely-used communication app.The vulnerability was in WhatsApp’s contact discovery mechanism, the foundation of how this and many similar apps work. When WhatsApp is installed, it asks for permission to match mobile numbers in a user’s…
-
WhatsApp flaw allowed discovery of the 3.5 billion mobile numbers registered to the platform
Tags: api, attack, bug-bounty, business, china, cloud, dark-web, data, data-breach, encryption, flaw, government, mobile, phishing, phone, privacy, spam, technology, vulnerability, windowsHey there You are using WhatsApp, marks this as one of the most embarrassing weaknesses yet in the world’s most widely-used communication app.The vulnerability was in WhatsApp’s contact discovery mechanism, the foundation of how this and many similar apps work. When WhatsApp is installed, it asks for permission to match mobile numbers in a user’s…
-
Chinese PlushDaemon Hackers Exploit EdgeStepper Tool to Hijack Legitimate Updates and Redirect to Malicious Servers
ESET researchers have uncovered a sophisticated attack chain orchestrated by the China-aligned threat actor PlushDaemon, revealing how the group leverages a previously undocumented network implant, EdgeStepper, to conduct adversary-in-the-middle attacks. By compromising network devices and redirecting DNS queries to malicious servers, PlushDaemon intercepts legitimate software updates and replaces them with trojanized versions containing the SlowStepper…
-
Asus Routers Hacked in ‘WrtHug’ Campaign
Researchers Suspect a Chinese ROB-Building Operation. Suspected Chinese cyberespionage hackers have commandeered tens of thousands of Asus routers in an operation showing a heavy emphasis on infecting devices stationed in Taiwan. The campaign tracks with reports that Beijing is actively pressing unpatched routers into ORB networks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/asus-routers-hacked-in-wrthug-campaign-a-30064
-
PlushDaemon Hackers Unleash New Malware in China-Aligned Spy Campaigns
The cyber espionage group uses a previously undocumented network implant to drop two downloaders, LittleDaemon and DaemonLogistics, which deliver a backdoor First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/plushdaemon-new-malware-china-spy/
-
‘PlushDaemon’ hackers hijack software updates in supply-chain attacks
The China-aligned advanced persistent threat (APT) tracked as ‘PlushDaemon’ is hijacking software update traffic to deliver malicious payloads to its targets. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/plushdaemon-hackers-hijack-software-updates-in-supply-chain-attacks/
-
China-aligned threat actor is conducting widespread cyberespionage campaigns
The threat group PlushDaemon uses routers and other network device implants to redirect domain name system (DNS) queries to malicious external servers which take over updates to unleash tools used for cyberespionage. First seen on therecord.media Jump to article: therecord.media/china-aligned-threat-actor-espionage-network-devices
-
Threat group reroutes software updates through hacked network gear
Sometimes an attack hides in the most ordinary corner of a network. ESET researchers say a China aligned threat group known as PlushDaemon has been quietly using hacked … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/11/19/eset-plushdaemon-dns-hijacking/
-
China-Linked Operation “WrtHug” Hijacks Thousands of ASUS Routers
SecurityScorecard has revealed a new Chinese campaign targeting thousands of ASUS routers globally First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/
-
China-aligned threat actor is conducting widespread cyberespionage campaigns
The threat group PlushDaemon uses routers and other network device implants to redirect domain name system (DNS) queries to malicious external servers which take over updates to unleash tools used for cyberespionage. First seen on therecord.media Jump to article: therecord.media/china-aligned-threat-actor-espionage-network-devices
-
Tens of thousands more ASUS routers pwned by suspected, evolving China operation
Researchers say attacks are laying the groundwork for stealthy espionage activity First seen on theregister.com Jump to article: www.theregister.com/2025/11/19/thousands_more_asus_routers_pwned/