Tag: china
-
Cybersecurity Stocks Surge Amid Sector’s ‘Resilience And Isolation’ Within Tech Industry
As the stock market swung back upward Wednesday, with President Trump announcing a 90-day pause on tariffs targeting many countries besides China, cybersecurity vendors were among those seeing major stock price gains. First seen on crn.com Jump to article: www.crn.com/news/security/2025/cybersecurity-stocks-surge-amid-sector-s-resilience-and-isolation-within-tech-industry
-
Sensitive financial files feared stolen from US bank watchdog
OCC mum on who broke into email, but Treasury fingered China in similar hack months ago First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/occ_bank_email_hack/
-
Senate Intel Vice Chair Prods Trump Over TikTok Plans
Sen. Mark Warner Says Talk of Oracle’s Involvement Worrisome Due to Recent Breaches. Speculation about software giant Oracle being a top contender to take over social media platform TikTok from China-based ByteDance is especially concerning considering Oracle’s two recent data breaches, said the co-chair of the Senate Intelligence Committee in a letter to the Trump…
-
Policymakers weigh U.S.-China AI competition after DeepSeek
Boosting federal R&D, sustaining export controls and creating a federal AI framework are a few suggestions experts made to help maintain the U.S. lead in AI. First seen on techtarget.com Jump to article: www.techtarget.com/searchenterpriseai/news/366622219/Policymakers-weigh-US-China-AI-competition-after-DeepSeek
-
China-Linked Hackers Continue Harassing Ethnic Groups With Spyware
Threat actors are trolling online forums and spreading malicious apps to target Uyghurs, Taiwanese, Tibetans, and other individuals aligned with interests that China sees as a threat to its authority. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/china-continues-harassing-ethnic-groups-spyware
-
Senator warns China could obtain Americans’ genetic data through 23andMe sale
Sen. Bill Cassidy (R-LA) on Tuesday sent Treasury Secretary Scott Bessent a letter raising alarms about the possibility that genetic data belonging to more than 15 million 23andMe customers could end up in the hands of China and other foreign adversaries when the company is sold. First seen on therecord.media Jump to article: therecord.media/senator-warns-china-could-acquire-23andme-genetic-data
-
NCSC issues warning over Chinese Moonshine and BadBazaar spyware
Two spyware variants are being used to target the mobile devices of persons of interest to Chinese intelligence, including individuals in the Taiwanese, Tibetan and Uyghur communities First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622023/NCSC-issues-warning-over-Chinese-Moonshine-and-BadBazaar-spyware
-
Policymakers weigh U.S., China AI competition after DeepSeek
Boosting federal R&D, sustaining export controls and creating a federal AI framework were a few suggestions experts made to help maintain the U.S. lead in AI. First seen on techtarget.com Jump to article: www.techtarget.com/searchenterpriseai/news/366622219/Policymakers-weigh-US-China-AI-competition-after-DeepSeek
-
US Risks Losing ‘AI Cold War’ as China Surges Ahead
AI Leaders Call for Proactive US Response Amid Chinese Technology Breakthroughs. The United States risks losing the so-called AI Cold War against China unless it abandons traditional containment strategies and adapts to Beijing’s advances, panelists told lawmakers Tuesday. I’m as stunned as all of you about just how fast China has caught up, said Adam…
-
Tech experts recommend full steam ahead on US export controls for AI
While the efficiency of newer Chinese models like DeepSeek have rumbled U.S. AI markets, experts say previous restrictions on the sale of computer chips and other important components are having an impact. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-deepseek-export-controls-congress-i/
-
Third-party ransomware attack jeopardizes DBS Group, Bank of China Singapore data
First seen on scworld.com Jump to article: www.scworld.com/brief/third-party-ransomware-attack-jeopardizes-dbs-group-bank-of-china-singapore-data
-
Over 5K Ivanti VPNs vulnerable to critical bug under attack
China-linked threat actors last month began exploiting CVE-2025-22457, a critical stack buffer-overflow flaw. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/5k-ivanti-vpns-vulnerable-critical-flaw-under-attack/744748/
-
Canada says China-linked information campaign spreading false narratives about prime minister
A China-linked information campaign is using a network of WeChat accounts to attack Canadian Prime Minister Mark Carney ahead of the country’s upcoming federal election, authorities said. First seen on therecord.media Jump to article: therecord.media/canada-says-china-linked-information-campaign-spreading-narriatives-carney-election
-
Chinese ToddyCat abuses ESET antivirus bug for malicious activities
A range of affected products: The flaw affects all of ESET offerings with the command line scanner which includes an array of products used by power users, IT admins, and enterprise environments.According to the advisory, the affected antivirus versions include ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, and ESET Security Ultimate 18.0.12.0…
-
Exploited Vulnerability Puts 5,000 Ivanti VPN Appliances at Risk
More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by Chinese hackers. The post Exploited Vulnerability Puts 5,000 Ivanti VPN Appliances at Risk appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/exploited-vulnerability-puts-5000-ivanti-vpn-appliances-at-risk/
-
Smishing Triad Expands Fraud Campaign, Targets Toll Payment Services
A China-based cybercriminal group known as the Smishing Triad is escalating its smishing activities, now targeting consumers in the US and UK with fraudulent text messages related to toll payment services. The Resecurity report reveals that these campaigns involve deceptive text messages that claim unpaid toll bills or payment requests linked to services like FasTrak,…
-
Threat Actors Exploit Toll Payment Services in Widespread Hacking Campaign
In a sophisticated cybercrime operation, the Smishing Triad, a China-based group, has been identified as the orchestrator behind a surge in smishing campaigns targeting consumers in the US and UK. These campaigns exploit toll payment services like FasTrak, E-ZPass, and I-Pass, with expectations of expanding globally. The Smishing Triad’s Modus Operandi The group employs fraudulent…
-
Smishing Triad Fuels Surge in Toll Payment Scams in US, UK
A rise in smishing campaigns impersonating toll service providers has been linked to China’s Smishing Triad First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smishing-triad-toll-payment-scams/
-
How Trump’s tariffs are shaking up the cybersecurity sector
Tags: antivirus, ceo, china, cisa, country, cyber, cyberattack, cybersecurity, defense, finance, government, Hardware, infrastructure, microsoft, network, service, supply-chain, technology, threat, vulnerabilityCustomer cutbacks and increased costs are major concerns: In addition to the macroeconomic fears and worries over retaliatory measures, US cybersecurity companies are vulnerable to losing revenue under the new tariffs as customers reduce their cybersecurity budgets to cope with their own tariff-induced financial pressures.”What’s happening is that people are looking at cybersecurity through the…
-
China hits back at America with retaliatory tariffs, export controls on rare earth minerals
Shock and ore, 北京-style First seen on theregister.com Jump to article: www.theregister.com/2025/04/04/china_hits_back_at_trump/
-
Chinese Espionage Group Targeting Legacy Ivanti VPN Devices
More Evidence Surfaces of Chinese Hackers Targeting Ivanti Products. A suspected Chinese cyberespionage operation is behind a spate of malware left on VPN appliances made by Ivanti. The threat actor used a critical security vulnerability the Utah company patched in February. We are aware of a limited number of customers whose appliances have been exploited.…
-
CISA warns of latest Ivanti firewall bug being exploited by suspected Chinese hackers
Researchers attributed exploitation of the vulnerability to a suspected China-based cyberespionage group tracked as UNC5221. First seen on therecord.media Jump to article: therecord.media/cisa-ivanti-firewall-bug-exploitation
-
Chinese Hackers Exploit Ivanti VPN Vulnerability to Deliver Malware Payloads
Ivanti disclosed a critical security vulnerability, CVE-2025-22457, affecting its Connect Secure (ICS) VPN appliances, particularly versions 22.7R2.5 and earlier. This buffer overflow vulnerability enables attackers to achieve remote code execution when exploited successfully. Security researchers from Mandiant and Ivanti have confirmed active exploitation of this vulnerability in the wild, targeting ICS 9.X (end-of-life) and earlier…
-
China-Linked Threat Group Exploits Ivanti Bug
The vendor had originally assessed the flaw as low risk but now says it is a critical issue that enables remote code execution. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/china-linked-threat-group-exploits-ivanti-bug
-
Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw
Tags: china, espionage, exploit, flaw, hacker, ivanti, mandiant, remote-code-execution, vulnerabilityMandiant warned that Chinese espionage actor UNC5221 is actively exploiting a critical Ivanti vulnerability, which can lead to remote code execution First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-state-hackers-ivanti-flaw/
-
China-backed espionage group hits Ivanti customers again
UNC5221 has a knack for exploiting defects in Ivanti products. The group has exploited at least four vulnerabilities in the vendor’s products since 2023, according to Mandiant. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-espionage-group-ivanti-vulnerability-exploits/
-
China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March
Tags: china, exploit, flaw, group, ivanti, remote-code-execution, threat, update, vulnerability, zero-dayIvanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025. Ivanti released security updates to address a critical Connect Secure remote code execution vulnerability tracked as CVE-2025-22457. The vulnerability has been exploited by a China-linked threat actor since at least mid-March 2025. Ivanti did not disclose…
-
Suspected Chinese spies right now hijacking buggy Ivanti gear for third time in 3 years
Simple denial-of-service blunder turned out to be a remote unauth code exec disaster First seen on theregister.com Jump to article: www.theregister.com/2025/04/03/suspected_chines_snoops_hijacked_buggy/
-
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
A suspected Chinese APT group has exploited CVE-2025-22457 a buffer overflow bug that was previously thought not to be exploitable to compromise appliances … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/03/ivanti-vpn-customers-targeted-via-unrecognized-rce-vulnerability-cve-2025-22457/