Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network 2026-10-29 at 12:29 By Eduard Kovacs Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed. The post Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network appeared first on SecurityWeek. This article is an […]
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Read More »
China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
China-Linked Hackers Exploit PHP2Shell to Root Firewalls Read More »
Stolen AI Reasoning Could Help China Build Cheaper Rivals 2026-10-26 at 16:30 By Kevin Townsend Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek. This […]
Stolen AI Reasoning Could Help China Build Cheaper Rivals Read More »
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 at 13:31 By Ionut Arghire The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks Read More »
China Defends DeepSeek After US Ban of Its AI From Government Systems 2026-10-21 at 13:54 By Associated Press The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared […]
China Defends DeepSeek After US Ban of Its AI From Government Systems Read More »
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor 2026-10-21 at 13:03 By Ionut Arghire Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor […]
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor Read More »
AI Platform Cairn Abused to Hack Over 100 Organizations 2026-10-20 at 15:47 By Ionut Arghire At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused to Hack Over 100 Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
AI Platform Cairn Abused to Hack Over 100 Organizations Read More »
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day 2026-10-16 at 13:53 By Ionut Arghire Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day Read More »
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages 2026-10-14 at 16:00 By Eduard Kovacs Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Read More »
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »
US Disrupts Chinese State-Sponsored Hacking Tools 2026-10-09 at 11:36 By Ionut Arghire Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
US Disrupts Chinese State-Sponsored Hacking Tools Read More »
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward 2026-10-08 at 15:46 By Eduard Kovacs Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026. The post US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward appeared first on SecurityWeek. This article is an excerpt […]
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward Read More »
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts 2026-10-02 at 13:21 By Sinisa Markovic A China-aligned espionage group has been posing as a former White House official and a prominent economist to get into the cloud accounts of AI policy experts in the US, Proofpoint have found. The group, which the […]
Chinese spies impersonate White House, Anthropic figures to phish AI policy experts Read More »
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »
China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks 2026-09-26 at 21:09 By Associated Press The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents. The post China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks appeared first […]
China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks Read More »
80,000 relay servers help users in China slip past U.S. AI region bans 2026-09-23 at 16:57 By Sinisa Markovic More than 80,000 relay servers are helping users in China bypass geographic restrictions on leading U.S. AI models, according to Team Cymru. “What we have uncovered is an entire ecosystem designed explicitly to break the frontier […]
80,000 relay servers help users in China slip past U.S. AI region bans Read More »
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development 2026-09-14 at 17:28 By Associated Press China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI. The post Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development appeared […]
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development Read More »
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution 2026-09-14 at 14:51 By Ionut Arghire The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution appeared first on SecurityWeek. This article is an excerpt from […]
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution Read More »
US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities 2026-09-09 at 15:32 By Kevin Townsend Distillation is an ‘attack’ against an AI model designed to capture outputs, understand reasoning processes, and subsequently train a different model. The post US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities appeared first on SecurityWeek. This article […]
US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities Read More »