China APT

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

AI, Artificial Intelligence, China, China APT, ConnectWise, Malware & Threats, Microsoft /

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 at 13:31 By Ionut Arghire The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks Read More »

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

BeyondTrust, China, China APT, exploited, Vulnerabilities, vulnerability, Zero-Day /

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day 2026-10-16 at 13:53 By Ionut Arghire Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day Read More »

US Disrupts Chinese State-Sponsored Hacking Tools

China, China APT, disrupted, Flax Typhoon, Government, Integrity Tech, Malware & Threats, MicroScan, Tracking & Law Enforcement, US /

US Disrupts Chinese State-Sponsored Hacking Tools 2026-10-09 at 11:36 By Ionut Arghire Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

US Disrupts Chinese State-Sponsored Hacking Tools Read More »

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

China, China APT, exploit, exploited, Nation-State, Sogou, Tencent, Vulnerabilities, vulnerability /

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution 2026-09-14 at 14:51 By Ionut Arghire The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution appeared first on SecurityWeek. This article is an excerpt from […]

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution Read More »

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks

China, China APT, disrupted, disruption, Nation-State, QTFY, Tracking & Law Enforcement /

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks 2026-08-27 at 12:01 By Eduard Kovacs The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others. The post US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks appeared first on SecurityWeek. This […]

US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks Read More »

China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans

China, China APT, Government, Management & Strategy, Military /

China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans 2026-07-16 at 11:49 By Eduard Kovacs Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures. The post China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans appeared first on SecurityWeek. This article is an […]

China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans Read More »

Chinese Hackers Target Medical, Military, and AI Research in North America

China, China APT, espionage, Nation-State /

Chinese Hackers Target Medical, Military, and AI Research in North America 2026-06-15 at 17:07 By Eduard Kovacs Google’s Threat Intelligence Group has been tracking the cyberespionage group as UNC6508 since early 2025. The post Chinese Hackers Target Medical, Military, and AI Research in North America appeared first on SecurityWeek. This article is an excerpt from […]

Chinese Hackers Target Medical, Military, and AI Research in North America Read More »

Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns

China, China APT, Malware & Threats, Nation-State, Salt Typhoon, Twill Typhoon /

Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns 2026-05-14 at 18:25 By Ionut Arghire Salt Typhoon has hit an energy entity in Azerbaijan. Twill Typhoon has targeted Asian entities with an updated RAT. The post Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns appeared first on SecurityWeek. This article is an excerpt from […]

Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns Read More »

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking

China, China APT, exploited, firewall, Nation-State, Palo Alto Networks, Vulnerabilities, Zero-Day /

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking 2026-05-07 at 19:01 By Eduard Kovacs The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.  The post Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking appeared first on SecurityWeek. […]

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking Read More »

China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks

China APT, GopherWhisper, Malware & Threats, Nation-State /

China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks 2026-04-25 at 14:57 By Ionut Arghire Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors. The post China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks Read More »

Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure

backdoor, BPFDoor, China APT, Malware, Nation-State, Telecom, telecoms /

Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure 2026-03-26 at 15:52 By Ionut Arghire The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage. The post Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure Read More »

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation

Asia, China, China APT, Featured, Military, Nation-State /

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation 2026-03-16 at 14:52 By Ionut Arghire The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months. The post China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation Read More »

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments

China APT, cyberespionage, disrupted, espionage, GridTide, Malware, Malware & Threats, Nation-State, telecoms /

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments 2026-02-25 at 18:01 By Eduard Kovacs The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries.  The post Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments Read More »

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs

China APT, CISA KEV, exploited, Featured, Nation-State, supply chain attack, Taiwan, TeamT5, Vulnerabilities /

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs 2026-02-24 at 14:00 By Eduard Kovacs The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog. The post Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs appeared first on SecurityWeek. This article is an […]

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs Read More »

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

China, China APT, critical infrastructure, Government, Malware & Threats, Nation-State, rootkit, Shadow Campaigns /

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries 2026-02-05 at 13:02 By Eduard Kovacs Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China. The post Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries appeared first on SecurityWeek. This article is an excerpt […]

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries Read More »

Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit

China APT, HoneyMyte, Malware, Malware & Threats, Mustang Panda, rootkit, ToneShell /

Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit 2025-12-30 at 12:25 By Ionut Arghire The threat actor uses a signed driver file containing two user-mode shellcodes to execute its ToneShell backdoor. The post Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit Read More »

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports

China, China APT, Cyberwarfare, espionage, Government, Nation-State, UK, UK Government /

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports 2025-12-22 at 15:09 By Associated Press The British government is investigating a “cyber incident” following news reports that hackers linked to China have gained access to thousands of confidential documents. The post UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports appeared […]

UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports Read More »

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments

China, China APT, espionage, LongNosedGoblin, Malware & Threats, Nation-State /

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments 2025-12-19 at 16:42 By Ionut Arghire The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks. The post Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments Read More »

China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear

China, China APT, Cisco, CVE-2025-20393, exploited, Malware & Threats, UAT-9686, Vulnerabilities, Zero-Day /

China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear 2025-12-18 at 09:18 By Eduard Kovacs The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances. The post China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear Read More »

Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery

China, China APT, exploited, Malware, Malware & Threats, React, React2Shell /

Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery 2025-12-15 at 16:01 By Eduard Kovacs Google has also mentioned seeing React2Shell attacks conducted by Iranian threat actors. The post Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery Read More »

Scroll to Top