Vulnerabilities
Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed.
Hi, what are you looking for?
SecurityWeek
All posts tagged "China"
Malware & Threats
ESET has analyzed Spellbinder, the IPv6 SLAAC spoofing tool Chinese APT TheWizards uses to deploy its WizardNet backdoor.
Incident Response
SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently.
Cyberwarfare
As Xi Jinping advances his vision for China’s dominance by 2049, cybersecurity experts warn that connected technologies—like EV batteries—may quietly serve as tools of...
Data Breaches
Microsoft security chief Charlie Bell says the SFI's 28 objectives are “near completion” and that 11 others have made “significant progress.”
Cybercrime
Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme.
Nation-State
The Chinese state-sponsored group Mustang Panda has used new and updated malicious tools in a recent attack.
Malware & Threats
Windows versions of the BrickStorm backdoor that the Chinese APT used in the MITRE hack last year have been active for years.
Malware & Threats
In recent attacks, the state-sponsored backdoor BPFDoor is using a controller to open a reverse shell and move laterally.
Nation-State
China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin.
Nation-State
In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.
Malware & Threats
An undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras...
Government
The FCC is investigating whether Chinese firms such as Huawei, ZTE and China Telecom are still operating in the US.
Nation-State
The FishMonger APT group, a subdivision of Chinese cybersecurity firm I-Soon, compromised seven organizations in a 2022 campaign.
Nation-State
China-nexus cyberespionage group caught planting custom backdoors on end-of-life Juniper Networks Junos OS routers.
ICS/OT
Dragos case study reveals that Volt Typhoon hacked the US electric grid and stole information on OT systems.
Cyberwarfare
i-Soon employees charged with conducting extensive hacking campaigns on behalf of Beijing’s security services.
Malware & Threats
A China-linked botnet powered by 130,000 hacked devices has targeted Microsoft 365 accounts with password spraying attacks.
Artificial Intelligence
OpenAI has banned ChatGPT accounts used by Chinese threat actors, including ones leveraged for the development of spying tools.
Nation-State
Cisco Talos observed Chinese hackers pivoting from a compromised device operated by one telecom to target a device in another telecom.
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Vulnerabilities
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Application Security
Cybersecurity Funding
Artificial Intelligence
Malware & Threats