Nation-State
Google’s Threat Intelligence Group has been tracking the cyberespionage group as UNC6508 since early 2025.
Hi, what are you looking for?
SecurityWeek
All posts tagged "China"
Government
The 13 websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances
Nation-State
Posing as recruiters on online platforms, Chinese intelligence officers target personnel with access to classified or privileged information.
Cybercrime
Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.
Malware & Threats
Salt Typhoon has hit an energy entity in Azerbaijan. Twill Typhoon has targeted Asian entities with an updated RAT.
Nation-State
The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.
Vulnerabilities
The security defects allow unauthenticated, remote attackers to execute arbitrary code through crafted requests.
Cybercrime
A member of Silk Typhoon, Xu Zewei is accused of launching cyberattacks against universities in the US.
Artificial Intelligence
The Trump administration is vowing to crack down on foreign tech companies’ exploitation of U.S. artificial intelligence models.
Artificial Intelligence
360 Digital Security Group claims to have uncovered 1,000 vulnerabilities using AI, including at the Tianfu Cup hacking contest.
Malware & Threats
Masquerading as popular cryptocurrency wallets, the apps can hijack recovery phrases and private keys.
Vulnerabilities
A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads.
Mobile & Wireless
The agency has not named the problematic foreign-made applications, but TikTok and Temu come to mind.
Government
The sanctions target two Chinese individuals, two Chinese companies, and one Iranian firm involved in hacking EU member states.
Nation-State
The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.
Malware & Threats
The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores.
Vulnerabilities
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.
Malware & Threats
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.
Government
Rewards for exploits are reportedly much smaller than in the contest’s glory days.
Cybercrime
Threat actors from Russia, China, North Korea and Iran have been observed launching attacks.
Data Breaches
Roughly two dozen companies have notified their customers of the Klue-Salesforce incident impact.
Vulnerabilities
Artificial Intelligence
AWS has patched the vulnerability and published its own advisory to inform customers about the potential impact.
Artificial Intelligence
Artificial Intelligence
Application Security
