Tag: china
-
TikTok Hit with Euro530 Million Fine Over Data Transfers to China
Irish Data Protection Commission (DPC) has imposed a landmark Euro530 million fine on TikTok Technology Limited for illegally transferring European Economic Area (EEA) user data to China and failing to meet transparency obligations under the General Data Protection Regulation (GDPR). The decision, finalized on May 5, 2025, follows a multi-year inquiry into TikTok’s data governance…
-
Smishing on a Massive Scale: ‘Panda Shop’ Chinese Carding Syndicate
Resecurity found a new smishing kit called ‘Panda Shop,’ mimicking Smishing Triad tactics with improved features and new templates. Resecurity (USA) was the first company to identify the Smishing Triad, a group of Chinese cybercriminals targeting consumers across the globe. In August 2023, our team was able to identify their activity and locate the smishing…
-
TikTok data transfers to China prompts $600 million penalty
First seen on scworld.com Jump to article: www.scworld.com/brief/tiktok-data-transfers-to-china-prompts-600-million-penalty
-
Chinese Group TheWizards Exploits IPv6 to Drop WizardNet Backdoor
ESET has discovered Spellbinder, a new tool used by the China-linked cyber espionage group TheWizards to conduct AitM… First seen on hackread.com Jump to article: hackread.com/chinese-thewizards-exploits-ipv6-wizardnet-backdoor/
-
Smishing on a Massive Scale: Panda Shop Chinese Carding Syndicate
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/smishing-massive-scale-panda-shop-chinese-carding-syndicate
-
TikTok Fined Euro530m Over Transfers of European User Data to China
Ireland’s data protection watchdog accuses the Chinese social media giant of violating GDPR with transfers of European users’ data to China First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/tiktok-fined-530m-euros-european/
-
India’s chipmaking ambitions hurt by Zoho’s no-go and Adani unease
PLUS: China spring cleans its AIs; South Korea fines Meta, probes Broadcom; and more! First seen on theregister.com Jump to article: www.theregister.com/2025/05/05/asia_tech_news_in_brief/
-
TikTok fined Euro530M after EU user data ends up on servers in China
Ireland privacy watchdog says transfers violated GDPR, as Chinese app confirms Euro1B datacenter in Finland First seen on theregister.com Jump to article: www.theregister.com/2025/05/02/tiktok_gdpr_fine/
-
<>: China-Hacker kapern Software-Updates
Die Sicherheitsforscher Antivirenherstellers ESET haben eine groß angelegte Spionagekampagne aufgedeckt, die offenbar von der staatlich unterstützten chinesischen Hackergruppe “TheWizards” durchgeführt wird. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/thewizards-china-hacker-updates
-
How China and North Korea Are Industrializing Zero-Days
Tags: china, cloud, corporate, cyberattack, exploit, google, group, hacker, intelligence, korea, north-korea, organized, threat, zero-dayGoogle Cloud’s Hultquist on How State Hackers Exploit Code and Corporate Hiring. John Hultquist, chief analyst at Google Threat Intelligence Group, Google Cloud, discussed how China and North Korea are transforming cyberattacks into organized, factory-like operations. Alongside zero-day exploits, North Korean IT operatives are quietly infiltrating Fortune 500 companies under false identities. First seen on…
-
Irische Datenschutzbehörde verhängt 530 Millionen Euro-Strafe gegen TikTok
Tags: chinaDie irische Datenschutzbehörde (Data Protection Commission) hat dem chinesischen Unternehmen Bytedance als Eigentümer von TikTok eine Geldstrafe von 530 Millionen Euro auferlegt, weil Nutzerdaten nach China abgeflossen sind. Zudem gab es Anordnungen, bestimmte Sachverhalte zu korrigieren. Die irische Datenschutzkommission (Irish … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/02/irische-datenschutzbehoerde-verhaengt-530-millionen-euro-strafe-gegen-tiktok/
-
IPv6 SLAAC exploited by Chinese APT for AitM attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/ipv6-slaac-exploited-by-chinese-apt-for-aitm-attacks
-
Ireland’s DPC fined TikTok Euro530M for sending EU user data to China
Ireland’s Data Protection Commission (DPC) fined TikTok Euro530M for violating data rules by sending European user data to China. Ireland’s Data Protection Commission (DPC) fined the popular video-sharing platform TikTok Euro530 million for violating data laws by transferring data belonging to European users to China. TikTok violated GDPR by transferring EEA user data to China…
-
White House Warns China of Cyber Retaliation Over Infrastructure Hacks
NSC’s Alexei Bulazel said that failing to robustly respond to constant Chinese intrusions into critical infrastructure is in itself “escalatory” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/white-house-china-cyber-retaliation/
-
TikTok fined Euro530 million for sending European user data to China
The Irish Data Protection Commission (DPC) has fined TikTok Euro530 million (over $601 million) for illegally transferring the personal data of users in the European Economic Area (EEA) to China, violating the European Union’s GDPR data protection regulations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tiktok-fined-530-million-for-sending-european-user-data-to-china/
-
TikTok Slammed With Euro530 Million GDPR Fine for Sending E.U. Data to China
Ireland’s Data Protection Commission (DPC) on Tuesday fined popular video-sharing platform TikTok Euro530 million ($601 million) for infringing data protection regulations in the region by transferring European users’ data to China.”TikTok infringed the GDPR regarding its transfers of EEA [European Economic Area] User Data to China and its transparency requirements,” the DPC said in a…
-
Privacy regulator fines TikTok $600 million over EU data transfers to China
The Irish Data Protection Commission (DPC) fined Chinese-owned TikTok Euro530 million ($600 million) for violating GDPR rules about data transfers outside of Europe. First seen on therecord.media Jump to article: therecord.media/tiktok-fined-gdpr-data-chinese-servers
-
TikTok Fined 530 Million Euros for Data Transfer to China
Irish DPC Imposes a Fine for GDPR Violations. TikTok must pay 530 million euros to the Irish data regulator for non-compliance with European privacy law. The nearly $600 million fine stems from TikTok’s storage of European user data on servers in China and failure to disclose data transfers to China from July 2020 through November…
-
The 14 most valuable cybersecurity certifications
Tags: access, ai, application-security, attack, automation, best-practice, blockchain, blueteam, china, cisa, cisco, ciso, cloud, compliance, computer, computing, conference, control, country, credentials, cryptography, cyber, cybersecurity, data, defense, encryption, endpoint, exploit, finance, governance, government, guide, hacker, hacking, incident response, intelligence, Internet, jobs, kali, law, linux, malware, metric, microsoft, monitoring, network, penetration-testing, privacy, reverse-engineering, risk, risk-analysis, risk-management, skills, threat, training, vulnerability, windowsIndustry recognition Who’s to say one certification is more respected than another? Such criteria can be very subjective, so we turned to the most direct and unbiased source to cut through the ambiguity: job listings. In addition to education, skills, and qualifications, employers often specify certs they seek in their ideal candidate. These mentions carry…
-
Hackers abuse IPv6 networking feature to hijack software updates
A China-aligned APT threat actor named “TheWizards” abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/
-
Billbug Expands Cyber-Espionage Campaign in Southeast Asia
The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/billbug-cyber-espionage-campaign-southeast-asia
-
Experts See Little Progress After Major Chinese Telecom Hack
Salt Typhoon Exposed Major Flaws in Telecom Networks. Few Changes Have Been Made. After China’s Salt Typhoon breach of U.S. telecom networks, federal experts told Congress on Wednesday the nation remains dangerously exposed to another attack – despite warnings, investigations and interagency coordination, all of which have yet to produce systemic cyber defense improvements. First…
-
AI makes China leading threat to US critical infrastructure, says FBI official
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-makes-china-leading-threat-to-us-critical-infrastructure-says-fbi-official
-
Maryland man pleads guilty to outsourcing US govt work to North Korean dev in China
Feds say $970K scheme defrauded 13+ companies First seen on theregister.com Jump to article: www.theregister.com/2025/04/30/maryland_man_farming_web_dev/
-
SentinelOne warns of threat actors targeting its systems and high-value clients
SentinelOne warns China-linked APT group PurpleHaze attempted reconnaissance on its systems and high-value clients. Cybersecurity firm SentinelOne warns that a China-linked APT group, tracked as PurpleHaze, attempted to conduct reconnaissance on its infrastructure and high-value clients. The activity suggests targeted cyberespionage efforts aimed at gathering information for potential future attacks. SentinelOne first identified PurpleHaze’s activity…
-
WarGames it’s not 1983 anymore
China’s state-sponsored cyber operations, driven by groups like Volt Typhoon, Salt Typhoon, Brass Typhoon, and APT41, and amplified by techniques like Fast Flux DNS, are not chasing Hollywood apocalypse”, they’re seizing America’s networks, turning our infrastructure into a weapon against us. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/wargames-its-not-1983-anymore/
-
Cyber Espionage Campaign Targets Uyghur Exiles with Trojanized Language Software
A sophisticated cyberattack targeted senior members of the World Uyghur Congress (WUC), the largest Uyghur diaspora organization, using a weaponized version of UyghurEditPP-a trusted open-source Uyghur language text editor. This incident exemplifies the technical evolution of digital transnational repression and the exploitation of cultural software by state-aligned threat actors, likely linked to the Chinese government.…
-
Enterprise-specific zero-day exploits on the rise, Google warns
Tags: access, apple, apt, attack, china, cisco, cloud, crime, crimes, cyberespionage, detection, endpoint, exploit, finance, flaw, google, group, Hardware, incident response, injection, Internet, ivanti, korea, lessons-learned, mandiant, microsoft, mitigation, network, north-korea, remote-code-execution, russia, service, strategy, technology, threat, tool, update, vpn, vulnerability, zero-daySurge in network edge device exploitation: Of the 33 zero-day vulnerabilities in enterprise-specific products, 20 targeted hardware appliances typically located at the network edge, such as VPNs, security gateways, and firewalls. Notable targets last year included Ivanti Cloud Services Appliance, Palo Alto Networks’ PAN-OS, Cisco Adaptive Security Appliance, and Ivanti Connect Secure VPN.Targeted attacks against…
-
Windows Backdoor Targets Members of Exiled Uyghur Community
A spear-phishing campaign sent Trojanized versions of legitimate word-processing software to members of the World Uyghur Congress as part of China’s continued cyber-espionage activity against the ethnic minority. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/windows-backdoor-targets-members-exhiled-uyghur-community
-
SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients
Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some of its high-value customers.”We first became aware of this threat cluster during a 2024 intrusion conducted against an organization previously providing hardware logistics services for SentinelOne employees,” security First seen on thehackernews.com Jump to article:…