Tag: china
-
FBI Wraps Up Eradication Effort of Chinese ‘PlugX’ Malware
Two hacker groups were paid to develop malware targeting victims in the US, Europe, and Asia, as well as various Chinese dissident groups. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/fbi-wraps-up-eradication-chinese-plugx-malware
-
Chinese Connected Car Tech Banned by Biden Administration
National Security and Hacking Worries Underpin Concerns over Supply Chain Risk. The U.S. federal government is telling the automotive industry to stop buying Chinese manufactured hardware and software powering onboard telematics and automated driving systems, warning that the potential for nation-state hacking and espionage poses a national security risk. First seen on govinfosecurity.com Jump to…
-
BeyondTrust flaw CVE-2024-12686 exploited in the wild
BeyondTrust discovered the flaw last month while investigating breaches of a ‘limited number’ of SaaS customers at the hands of Chinese state-sponsored threat actors. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366618092/CISA-BeyondTrust-flaw-CVE-2024-12686-exploited-in-the-wild
-
Biden Issues Final Maritime Cybersecurity Rules
White House Mandates Cyber Incident Response Plans Amid Growing Chinese Threat. Federal regulations unveiled Tuesday require the U.S. maritime industry to implement baseline cybersecurity measures amid concerns over exposure to attacks from adversaries such as China. The rules mandate cybersecurity plans and clearly-defined cyber positions in ports and maritime facilities. First seen on govinfosecurity.com Jump…
-
DOJ deletes China-linked PlugX malware off more than 4,200 US computers
U.S law enforcement accused the People’s Republic of China of paying hackers that are part of a well-known group called Mustang Panda to deploy the PlugX malware, which allows them to “infect, control, and steal information from victim computers.”]]> First seen on therecord.media Jump to article: therecord.media/doj-deletes-china-linked-plugx-malware
-
FBI wipes Chinese PlugX malware from thousands of Windows PCs in America
Hey, Xi: Zà i jià n! First seen on theregister.com Jump to article: www.theregister.com/2025/01/14/fbi_french_cops_boot_chinas/
-
Law enforcement action deletes PlugX malware from thousands of machines
The remote access trojan was being used by a Chinese collective operating since 2014. First seen on cyberscoop.com Jump to article: cyberscoop.com/plugx-malware-mustang-panda-doj-takedown/
-
US issues final rule barring Chinese, Russian connected car tech
The Commerce Department on Tuesday announced a new rule barring certain Chinese and Russian connected car technology from being imported to the United States.]]> First seen on therecord.media Jump to article: therecord.media/us-issues-rule-banning-chinese-russian-car-tech
-
Trump and others want to ramp up cyber offense, but there’s plenty of doubt about the idea
In recent months, incoming Trump administration national security adviser Mike Waltz and some lawmakers have suggested that in response to Chinese cyber breaches, the United States needs to prioritize taking more aggressive offensive actions in cyberspace rather than emphasizing defense. It’s been said before. And it’s easier said than done. Experts that spoke with reporters…
-
US Chip Export Rule Proposes Limits to Thwart Chinese GPUs
Tags: chinaThe Biden administration states the rule will prevent U.S. chips from passing to China through countries loosely allied or not politically allied with the U.S. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/interim-rule-artificial-intelligence-diffusion/
-
Verizon Says It Has ‘Contained The Cyber Incident’ Linked To China-Based Salt Typhoon
Verizon says that an ‘independent and highly respected cybersecurity firm’ has confirmed that the cyberattack linked to China-based threat group Salt Typhoon has been ‘contained.’ First seen on crn.com Jump to article: www.crn.com/news/security/2025/verizon-says-it-has-contained-the-cyber-incident-linked-to-china-based-salt-typhoon
-
China Targeted Foreign Investment, Sanctions Offices in Treasury Hack: Reports
Chinese cyberspies targeted offices dealing with foreign investments and sanctions in the recent US Treasury hack. The post China Targeted Foreign Investment, Sanctions Offices in Treasury Hack: Reports appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/china-targeted-foreign-investment-sanctions-offices-in-treasury-hack-reports/
-
Biden’s final push: Using AI to bolster cybersecurity standards
Tags: access, ai, attack, china, cisa, compliance, cyber, cyberattack, cybersecurity, data, defense, detection, email, exploit, finance, framework, government, hacker, incident, infrastructure, intelligence, office, privacy, programming, resilience, risk, software, strategy, technology, threat, vulnerabilityIn a decisive move to strengthen national cybersecurity, President Joe Biden is poised to sign an executive order imposing stringent security standards for federal agencies and contractors. Scheduled for publication in the coming days, the directive will emphasize integrating artificial intelligence (AI) into cyber defense strategies while addressing systemic vulnerabilities in software security, reported Reuters.This…
-
Billig Aliexpress China RJ45-Adapter mit Sypware oder Treiber-Installer?
Tags: chinaGestern wurde ein Tweet abgesetzt, der absolut steil gingt. Sicherheitsforscherin Eva Prokoview hat sich über Aliexpress einen billigen RJ45-Adapter aus China kommen lassen und geöffnet. Der Adapter enthält einen SPI Flash Memory-Chip, der als Speicher agiert und eine .exe-Datei für … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/13/billig-aliexpress-china-rj45-adapter-mit-sypware-oder-treiber-installer/
-
Chinese cyber-spies peek over shoulder of officials probing real-estate deals near American military bases
Gee, wonder why Beijing is so keen on the checks notes Committee on Foreign Investment in the US First seen on theregister.com Jump to article: www.theregister.com/2025/01/10/china_treasury_foreign_investment/
-
Chinese hackers breach office that reviews foreign investments in US
First seen on scworld.com Jump to article: www.scworld.com/news/chinese-hackers-breach-office-that-reviews-foreign-investments-in-us
-
Last-Minute Biden EO Reportedly Prompted By Chinese Cyberattacks
First seen on scworld.com Jump to article: www.scworld.com/brief/last-minute-biden-eo-reportedly-prompted-by-chinese-cyberattacks
-
Biden readies executive order on cybersecurity after hacks linked to China
First seen on scworld.com Jump to article: www.scworld.com/news/biden-gives-executive-order-on-cybersecurity
-
Report: Chinese Hackers Breached CFIUS
Cyberespionage Campaign Reached Treasury Office that Reviews Foreign Investment. Chinese hackers reportedly breached a U.S. government office responsible for reviewing foreign investments for national security threats as part of a cyberespionage campaign targeting the Department of Treasury. Hackers gained access to the Committee on Foreign Investment in the U.S. First seen on govinfosecurity.com Jump to…
-
ISMG Editors: The Coming Battle Over Chinese Cyberthreats
Also: Cybersecurity Tech Leader Amit Yoran’s Life, Leadership and Legacy. In this week’s update, ISMG editors discussed the escalating geopolitical cyberthreats expected in 2025, including advanced and persistent campaigns linked to Chinese actors. Panelists also paid tribute to Amit Yoran, one of the cybersecurity industry’s most influential leaders. First seen on govinfosecurity.com Jump to article:…
-
Treasury hackers also breached US foreign investments review office
Chinese hackers, part of the state-backed Silk Typhoon threat group, have reportedly breached the Committee on Foreign Investment in the United States (CFIUS), which reviews foreign investments to determine national security risks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/treasury-hackers-also-breached-us-foreign-investments-review-office/
-
Chinese APT Group Is Ransacking Japan’s Secrets
Since 2019, MirrorFace has been stealing information from myriad Japanese organizations to gain leverage over Japan in the event of hostilities between the two countries, experts said. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-apt-group-ransacking-japans-secrets
-
China hacked US Treasury’s CFIUS, which reviews foreign investments for national security risks
The hackers targeting the Treasury are dubbed Silk Typhoon, and previously mass-hacked thousands of corporate email servers. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/10/china-hacked-us-treasurys-cfius-which-reviews-foreign-investments-for-national-security-risks/
-
RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns
Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia have been targeted by the China-nexus RedDelta threat actor to deliver a customized version of the PlugX backdoor between July 2023 and December 2024.”The group used lure documents themed around the 2024 Taiwanese presidential candidate Terry Gou, the Vietnamese National Holiday, flood protection in Mongolia, and meeting invitations, including…
-
Mandiant links Ivanti zero-day exploitation to Chinese hackers
Mandiant warned users to be prepared for widespread exploitation of CVE-2025-0282 as Ivanti products have become a popular target for attackers in recent years. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366617826/Mandiant-links-Ivanti-zero-day-exploitation-to-Chinese-hackers
-
China-linked APT group MirrorFace targets Japan
Japanese authorities attributed a cyber-espionage campaign targeting the country to the China-linked APT group MirrorFace. The National Police Agency (NPA) and the Cabinet Cyber Security Center in Japan have linked a long-running cyber-espionage campaign targeting local entities to the China-linked group MirrorFace (aka Earth Kasha). The campaign has been active since at least 2019, it…
-
Ivanti zero-day exploited by APT group that previously targeted Connect Secure appliances
Researchers from Google’s Mandiant division believe the critical remote code execution vulnerability patched on Wednesday by software vendor Ivanti has been exploited since mid-December by a Chinese cyberespionage group. This is the same group that has exploited zero-day vulnerabilities in Ivanti Connect Secure appliances back in January 2024 and throughout the year.The latest attacks, exploiting…
-
Final Biden Cybersecurity Order Will Face Political Hurdles
Officials Worry Trump’s Cybersecurity Agenda Could Scrap Biden’s Final Cyber Orders. An executive order set to be published by the Biden administration in its waning days could offer the next White House a blueprint to counter Chinese cyberattacks but experts fear its timing – so close to the transition of power – could make it…
-
Chinese spies targeting new Ivanti vulnerability, Mandiant says
A recently discovered bug in Ivanti’s Connect Secure VPN appears to be a target for malware previously only deployed by China-based hackers, say researchers for Google’s Mandiant team.]]> First seen on therecord.media Jump to article: therecord.media/china-espionage-ivanti-vulnerabilities-mandiant