China - Security Ticks

New Windows Zero-Day Exploited by Chinese APT: Security Firm

China, exploited, Mustang Panda, Vulnerabilities, Windows, Zero-Day / SecurityTicks

New Windows Zero-Day Exploited by Chinese APT: Security Firm 2025-02-14 at 13:52 By Eduard Kovacs ClearSky Cyber Security says it has seen a new Windows zero-day being exploited by a Chinese APT named Mustang Panda. The post New Windows Zero-Day Exploited by Chinese APT: Security Firm appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

New Windows Zero-Day Exploited by Chinese APT: Security Firm Read More »

Chinese Cyberspy Possibly Launching Ransomware Attacks as Side Job

China, cyberespionage, espionage, Ransomware / SecurityTicks

Chinese Cyberspy Possibly Launching Ransomware Attacks as Side Job 2025-02-13 at 15:34 By Ionut Arghire A toolset associated with China-linked espionage intrusions was employed in a ransomware attack, likely by a single individual. The post Chinese Cyberspy Possibly Launching Ransomware Attacks as Side Job appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Chinese Cyberspy Possibly Launching Ransomware Attacks as Side Job Read More »

Can AI Early Warning Systems Reboot the Threat Intel Industry?

APT, Artificial Intelligence, China, Google, Iran, Malware & Threats, Microsoft, North Korea, OpenAI, Threat Intelligence / SecurityTicks

Can AI Early Warning Systems Reboot the Threat Intel Industry? 2025-02-10 at 13:02 By Ryan Naraine News analysis: The big AI platforms are emerging as frontline early warning systems, detecting nation-state hackers at the outset of their campaigns. Can this help save the threat intel industry? The post Can AI Early Warning Systems Reboot the

React to this headline:

Can AI Early Warning Systems Reboot the Threat Intel Industry? Read More »

House Lawmakers Push to Ban AI App DeepSeek From US Government Devices

AI, Artificial Intelligence, Ban, China, Data Protection, DeepSeek, Featured, Government / SecurityTicks

House Lawmakers Push to Ban AI App DeepSeek From US Government Devices 2025-02-06 at 22:16 By Associated Press A bipartisan duo in the the U.S. House is proposing legislation to ban the Chinese artificial intelligence app DeepSeek from federal devices. The post House Lawmakers Push to Ban AI App DeepSeek From US Government Devices appeared

React to this headline:

House Lawmakers Push to Ban AI App DeepSeek From US Government Devices Read More »

Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US

Artificial Intelligence, China, DeepSeek / SecurityTicks

Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US 2025-02-05 at 23:47 By Associated Press DeepSeek has computer code that could send some user login information to China Mobile. The post Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US appeared first on SecurityWeek. This

React to this headline:

Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US Read More »

DeepSeek’s popularity exploited by malware peddlers, scammers

Artificial Intelligence, China, consumer, data security, DeepSeek, Don't miss, enterprise, Hot stuff, KELA, LLMs, Malware, News, Privacy, threat / SecurityTicks

DeepSeek’s popularity exploited by malware peddlers, scammers 2025-01-29 at 15:18 By Zeljka Zorz As US-based AI companies struggle with the news that the recently released Chinese-made open source DeepSeek-R1 reasoning model performs as well as theirs for a fraction of the cost, users are rushing to try out DeepSeek’s AI tool. In the process, they

React to this headline:

China-aligned PlushDaemon APT compromises supply chain of Korean VPN

APT, backdoor, China, cyber espionage, cybercrime, ESET, Malware, News, report, VPN / SecurityTicks

China-aligned PlushDaemon APT compromises supply chain of Korean VPN 2025-01-22 at 08:04 By Help Net Security ESET researchers have uncovered a supply chain attack targeting a South Korean VPN provider, carried out by PlushDaemon, a newly identified China-aligned APT group. In this cyberespionage campaign, the attackers compromised the legitimate installer, replacing it with a malicious

React to this headline:

China-aligned PlushDaemon APT compromises supply chain of Korean VPN Read More »

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks

China, cybercrime, News / SecurityTicks

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks 2024-12-10 at 22:48 By Help Net Security The Department of the Treasury is sanctioning Chinese cybersecurity company Sichuan Silence, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of thousands of firewalls worldwide. Many of the victims

React to this headline:

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks Read More »

8+ US telcos compromised, FBI advises Americans to use encrypted communications

China, Don't miss, Encryption, Hot stuff, News, telecommunications, tips, USA / SecurityTicks

8+ US telcos compromised, FBI advises Americans to use encrypted communications 2024-12-05 at 14:24 By Zeljka Zorz FBI and Cybersecurity and Infrastructure Security Agency (CISA) officials have advised Americans to use encrypted call and messaging apps to protect their communications from threat actors that have – and will – burrow into the networks and systems

React to this headline:

8+ US telcos compromised, FBI advises Americans to use encrypted communications Read More »

Active network of North Korean IT front companies exposed

China, Don't miss, Hot stuff, Insider Threat, News, North Korea, Palo Alto Networks, SentinelOne, software development, tips, USA / SecurityTicks

Active network of North Korean IT front companies exposed 2024-11-21 at 16:18 By Zeljka Zorz An analysis of the websites belonging to companies that served as a front for getting North Korean IT workers remote jobs with businesses worldwide has revealed an active network of such companies originating in China. Unearthing North Korean IT front

React to this headline:

Active network of North Korean IT front companies exposed Read More »

FBI confirms China-linked cyber espionage involving breached telecom providers

APT, China, CISA, cyber espionage, data breach, Don't miss, FBI, Hot stuff, News, telecommunications, USA / SecurityTicks

FBI confirms China-linked cyber espionage involving breached telecom providers 2024-11-14 at 14:16 By Zeljka Zorz After months of news reports that Chinese threat actors have breached the networks of US telecommunications and internet service providers, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have confirmed the success of the attacks, which were part

React to this headline:

FBI confirms China-linked cyber espionage involving breached telecom providers Read More »

Biden-Harris Policies Ignited Global Chaos: WW3 Fears Rise as 2024 Election Nears

2024 Election, Afghanistan, Biden-Harris, border, China, donald trump, foreign policy, Hamas, Iran, Israel, nuclear weapons, politics, Russia, Taliban, Ukraine, World War III / SecurityTicks

Biden-Harris Policies Ignited Global Chaos: WW3 Fears Rise as 2024 Election Nears 2024-10-21 at 12:30 By As the 2024 election approaches, the Biden-Harris administration’s foreign policy has left the world in utter chaos and teetering on the brink of World War III — from the disastrous Afghanistan withdrawal to the Israel-Hamas war — all while

React to this headline:

Biden-Harris Policies Ignited Global Chaos: WW3 Fears Rise as 2024 Election Nears Read More »

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers

China, Fraud & Identity Theft, KnowBe4, Mandiant, Nation-State, North Korea, Russia, UNC5267 / SecurityTicks

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers 2024-09-23 at 20:31 By Ryan Naraine Mandiant shines the spotlight on the growing infiltration of US and Western companies by North Korean fake IT workers. The post Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers appeared first on SecurityWeek.

React to this headline:

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers Read More »

Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads

China, Government, IoT Security, Russia / SecurityTicks

Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads 2024-09-23 at 17:02 By Associated Press In extreme situations, a foreign adversary could shut down or take simultaneous control of multiple vehicles operating in the United States, causing crashes and blocking roads. The post Ban Sought for Chinese, Russian Software

React to this headline:

Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads Read More »

FBI forced Flax Typhoon to abandon its botnet

botnet, China, consumer, Don't miss, DVR, enterprise, FBI, government-backed attacks, Hot stuff, IoT, Justice Department, Lumen, NAS, News, router, security cameras, SMBs / SecurityTicks

FBI forced Flax Typhoon to abandon its botnet 2024-09-19 at 14:16 By Zeljka Zorz A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized operations to take control of

React to this headline:

FBI forced Flax Typhoon to abandon its botnet Read More »

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon

botnet, China, Featured, Flax Typhoon, Nation-State, Raptor Train, takedown, Tracking & Law Enforcement / SecurityTicks

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon 2024-09-19 at 13:16 By Eduard Kovacs The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices. The post US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon appeared first on SecurityWeek. This article is an

React to this headline:

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon Read More »

VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest

China, CVE-2024-38812, CVE-2024-38813, Matrix CUp, vCenter Server, VMWare, Vulnerabilities / SecurityTicks

VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest 2024-09-17 at 22:31 By Ryan Naraine VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10. The post VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest appeared first on

React to this headline:

VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest Read More »

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military

charged, China, espionage, Military, NASA, Nation-State, spear-phishing / SecurityTicks

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military 2024-09-17 at 13:01 By Ionut Arghire Chinese national Song Wu allegedly sent spear-phishing emails to NASA, Air Force, Navy, Army, and FAA employees. The post DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military appeared first on SecurityWeek. This article is an

React to this headline:

DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military Read More »

House Report Shows Chinese Cranes a Security Risk to US Ports

China, ICS/OT, Nation-State, port / SecurityTicks

House Report Shows Chinese Cranes a Security Risk to US Ports 2024-09-13 at 15:01 By Ionut Arghire A joint report from the Committees on China and Homeland Security warns of the security risks posed by Chinese cranes in US ports. The post House Report Shows Chinese Cranes a Security Risk to US Ports appeared first

React to this headline:

House Report Shows Chinese Cranes a Security Risk to US Ports Read More »

Major Backdoor in Millions of RFID Cards Allows Instant Cloning

backdoor, China, Featured, IoT Security, RFID, Vulnerabilities / SecurityTicks

Major Backdoor in Millions of RFID Cards Allows Instant Cloning 2024-08-20 at 21:31 By Ryan Naraine Backdoor in millions of contactless cards made by Shanghai Fudan Microelectronics allows instantaneous cloning of RFID smart cards used to open office doors and hotel rooms around the world. The post Major Backdoor in Millions of RFID Cards Allows

React to this headline:

Major Backdoor in Millions of RFID Cards Allows Instant Cloning Read More »