Tag: china
-
Ivanti patches Connect Secure zero-day exploited since mid-March
Tags: china, espionage, exploit, ivanti, malware, remote-code-execution, update, vulnerability, zero-dayIvanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-patches-connect-secure-zero-day-exploited-since-mid-march/
-
Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances
Ivanti misdiagnoses a remote code execution vulnerability and Mandiant reports that Chinese hackers are launching in-the-wild exploits. The post Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/chinese-apt-pounces-on-misdiagnosed-rce-in-ivanti-vpn-appliances/
-
App Stores OK’ed VPNs Run by China PLA
Bad Apple: Chinese firm banned by the U.S. is the shady entity behind a clutch of free VPN apps”, with over a million downloads. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/app-stores-oked-vpns-run-by-china-pla/
-
Experts Warn Congress Another Salt Typhoon Attack Is Coming
Chinese Hackers Are Pre-Positioned, and Top Officials Could Be Making Matters Worse. Experts told lawmakers on Wednesday that without urgent federal action to strengthen cyber defenses and additional efforts to improve the cybersecurity practices of some of the highest ranking government officials, another Salt Typhoon attack could be just around the corner. First seen on…
-
Tackling Chinese cyber threats should be US priority, says ex-NSA head
First seen on scworld.com Jump to article: www.scworld.com/brief/tackling-chinese-cyber-threats-should-be-us-priority-says-ex-nsa-head
-
Latin America targeted with Chinese malware, says Joint Chiefs chair nominee
First seen on scworld.com Jump to article: www.scworld.com/brief/latin-america-targeted-with-chinese-malware-says-joint-chiefs-chair-nominee
-
Asia-Pacific, Latin America subjected to Chinese cyberespionage attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/asia-pacific-latin-america-subjected-to-chinese-cyberespionage-attacks
-
Latest Ivanti bug, paired with malware, earns an alert from CISA
A recent alert from CISA builds on previous research about a vulnerability in Ivanti products that China-linked hackers have used to insert malware into networks. First seen on therecord.media Jump to article: therecord.media/cisa-alert-ivanti-bug-resurge-malware
-
Surge in Smishing Fueled by Lucid PhaaS Platform
Chinese-Speaking Operators Have Made Lucid a ‘Primary Source’ of Phishing. Security researchers say they expect a surge this year in text message smishing fueled by a phishing-as-a-service platform operated by Chinese-speaking threat actors. Lucid already is a primary source of phishing campaigns targeting users in Europe, the United Kingdom and the United States. First seen…
-
Cybersecurity Professor Faced China-Funding Inquiry Before Disappearing, Sources Say
A lawyer for Xiaofeng Wang and his wife says they are “safe” after FBI searches of their homes and Wang’s sudden dismissal from Indiana University, where he taught for over 20 years. First seen on wired.com Jump to article: www.wired.com/story/xiaofeng-wang-indiana-university-research-probe-china/
-
Cybersecurity Professor Faced China Funding Inquiry Before Disappearing, Sources Say
A lawyer for Xiaofeng Wang and his wife says they are “safe” after FBI searches of their homes and Wang’s sudden dismissal from Indiana University, where he taught for over 20 years. First seen on wired.com Jump to article: www.wired.com/story/xiaofeng-wang-indiana-university-research-probe-china/
-
China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
China-linked APT group FamousSparrow hits targets in the Americas using upgraded SparrowDoor malware in new cyberespionage campaign, ESET reports. First seen on hackread.com Jump to article: hackread.com/china-famoussparrow-apt-americas-sparrowdoor-malware/
-
Unitree Go1: Gefährliche Backdoor in populärem Roboterhund entdeckt
Ein Roboterhund aus China konnte mit einem bestimmten API-Key aus der Ferne gesteuert werden – mit erheblichen Risiken für Personen in der Nähe. First seen on golem.de Jump to article: www.golem.de/news/unitree-go1-gefaehrliche-backdoor-in-populaerem-roboterhund-entdeckt-2504-194933.html
-
Cybercom discovered Chinese malware in South American nations, Joint Chiefs chairman nominee
So-called hunt forward operations by U.S. Cyber Command have uncovered Chinese malware implanted in Latin American nations, according to retired Lt. Gen. Dan “Razin” Caine. First seen on defensescoop.com Jump to article: defensescoop.com/2025/04/01/cybercom-chinese-malware-south-america-dan-caine-joint-chiefs-trump/
-
Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs
An undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes. The post Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/undocumented-remote-access-backdoor-found-in-unitree-go1-robot-dog/
-
Exclusive: Gen. Paul Nakasone says China is now our biggest cyber threat
More than a year away from leading the NSA and Cyber Command, Paul Nakasone told the Click Here podcast that they could ask him anything. So they did. About China, AI, DOGE and more. First seen on therecord.media Jump to article: therecord.media/nakasone-interview-china-ai-deepseek-doge
-
China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions
Cybersecurity researchers have shed light on a new China-linked threat actor called Earth Alux that has targeted various key sectors such as government, technology, logistics, manufacturing, telecommunications, IT services, and retail in the Asia-Pacific (APAC) and Latin American (LATAM) regions.”The first sighting of its activity was in the second quarter of 2023; back then, it…
-
Online-Erpresserbrief bei einem IT-Dienstleister in der Republik China / Taiwan
Explanation of The Company’s Cybersecurity First seen on emops.twse.com.tw Jump to article: emops.twse.com.tw/server-java/t05sr01_1_e
-
Schadsoftware bei einem Stahlproduzent in der Republik China / Taiwan
Explanation of Our Company’s Cybersecurity Incident First seen on emops.twse.com.tw Jump to article: emops.twse.com.tw/server-java/t05sr01_1_e
-
Earth Alux Hackers Use VARGIET Malware to Target Organizations
A new wave of cyberattacks orchestrated by the advanced persistent threat (APT) group Earth Alux has been uncovered, revealing the use of sophisticated malware, including the VARGEIT backdoor, to infiltrate critical industries. Linked to China, Earth Alux has been targeting organizations across the Asia-Pacific (APAC) region and Latin America since 2023, focusing on sectors such…
-
News brief: China-linked APTs and Russian access broker
Check out the latest security news from the Informa TechTarget team. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366621697/News-brief-China-linked-APTs-and-Russian-access-broker
-
Rootkit, Backdoor and Tunneler: Ivanti Malware Does It All
CISA Publishes Anatomy of Advanced Ivanti VPN Malware. Hackers using Trojans connected to a malware family deployed by Chinese nation-state hackers are actively exploiting a now-patched vulnerability in Ivanti Connect Secure appliances. The malware contains capabilities of a rootkit, dropper, backdoor, bootkit, proxy and tunneler. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/rootkit-backdoor-tunneler-ivanti-malware-does-all-a-27881
-
Intel and Microsoft staff allegedly lured to work for fake Chinese company in Taiwan
11 companies, including SMIC, accused of disguising outposts so they can illicitly serve Beijing First seen on theregister.com Jump to article: www.theregister.com/2025/03/31/china_disguised_tech_companies_taiwan/
-
Chinese Lotus Blossom Hackers leverages Windows Management Instrumentation for Network Movement
The Chinese Advanced Persistent Threat (APT) group known as Lotus Blossom, also referred to as Billbug, Thrip, or Spring Dragon, has intensified its cyber-espionage operations by employing advanced techniques, including the use of Windows Management Instrumentation (WMI) for lateral movement within targeted networks. This group, active for over a decade, has recently deployed new variants…
-
Ransomware bei einer Immobiliengesellschaft in der Republik China / Taiwan
A cyber security incident occurred in our company First seen on emops.twse.com.tw Jump to article: emops.twse.com.tw/server-java/t05sr01_1_e
-
Cyberangriff auf einen Sportgerätehersteller in der Republik China / Taiwan
Explanation of Our Company’s Cybersecurity First seen on emops.twse.com.tw Jump to article: emops.twse.com.tw/server-java/t05sr01_1_e
-
Trump’s ‘preparedness’ executive order would shift cyber defense burden where it doesn’t belong, experts say
The order says state and local governments should “own” addressing risks like cyberattacks. It’s a mismatch when a small town goes up against China, experts countered. First seen on cyberscoop.com Jump to article: cyberscoop.com/trump-executive-order-cybersecurity-state-local-impact/
-
China’s FamousSparrow flies back into action, breaches US org after years off the radar
Crew also cooked up two fresh SparrowDoor backdoor variants, says ESET First seen on theregister.com Jump to article: www.theregister.com/2025/03/27/china_famoussparrow_back/
-
ISMG Editors: Ransomware’s Stealth vs. Spectacle Tactics
Tags: attack, china, cyber, cybersecurity, espionage, infrastructure, ransomware, strategy, tactics, updateAlso: Rapid7’s Boardroom Shake-Up, China’s Shift Tactical Cyber Shift. In this week’s update, ISMG editors unpacked stealth vs. spectacle in ransomware attacks, Rapid7’s boardroom shake-up led by activist investors, and China’s shift from cyber espionage to infrastructure sabotage – driving key shifts in global cybersecurity strategy and resilience. First seen on govinfosecurity.com Jump to article:…
-
New ‘Lucid’ Phishing Platform Abuses iMessage, Android RCS to Slip Past Defenses
A sophisticated cybercrime service known as >>Lucid