China-linked hackers exploit patched ToolShell flaw to breach Middle East telecomSecurity Affairs·Oct 24, 08:37 UTC · Oct 24, 2025Vulnerability in the wildCVE-2025-53770CVE-2021-3694260
ToolShell bug used by Chinese attackers against governments in Africa, South AmericaThe Record·Oct 22, 19:04 UTC · Oct 22, 2025RansomwareCVE-2025-53770CVE-2025-4970660
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchThe Hacker News·Oct 22, 12:56 UTC · Oct 22, 2025VulnerabilityCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs60
China-linked APT Jewelbug targets Russian IT provider in rare crossSecurity Affairs·Oct 16, 14:11 UTC · Oct 16, 2025Data breach57
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for MonthsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability242
UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting DiplomatsThe Hacker News·Aug 26, 10:32 UTC · Aug 26, 2025Malware42
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·Aug 19, 13:08 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·May 17, 13:56 UTC · May 17, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60
Chinese ‘FamousSparrow’ hackers back from the dead and targeting North America, researchers sayThe Record·Mar 26, 16:38 UTC · Mar 26, 2025Vulnerability42
China-linked FamousSparrow APT group resurfaces with enhanced capabilitiesHelp Net Security·Mar 26, 00:00 UTC · Mar 26, 2025Threat actor57
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and RootkitsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025MalwareCVE-2025-2159060
Space Pirates Targets Russian IT Firms With New LuckyStrike Agent MalwareThe Hacker News·Feb 27, 13:50 UTC · Feb 27, 2025Malware42
China-linked APT group Winnti targets Japanese organizationsSecurity Affairs·Feb 18, 16:10 UTC · Feb 18, 2025Threat actor57
French Authorities Launch Operation to Remove PlugX Malware from Infected SystemsThe Hacker News·Jan 3, 04:54 UTC · Jan 3, 2025Malware55
Chinese Hackers Exploit Visual Studio Code in Southeast Asian CyberattacksThe Hacker News·Dec 10, 09:03 UTC · Dec 10, 2024Exploit / PoCCVE-2024-2491960
Kaspersky report on APT trends in Q3 2024Kaspersky Securelist·Nov 28, 10:00 UTC · Nov 28, 2024Vulnerability42
Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ CountriesThe Hacker News·Nov 28, 09:13 UTC · Nov 28, 2024MalwareCVE-2023-46805CVE-2024-21887CVE-2023-48788+5 CVEs47
Chinese Hackers Exploit T-Mobile and Other U.S. Telecoms in Broader Espionage CampaignThe Hacker News·Nov 19, 08:53 UTC · Nov 19, 2024Threat actor57
Hackers deployed new malware against university in TaiwanThe Record·Aug 20, 14:05 UTC · Aug 20, 2024MalwareCVE-2024-457747
Security Affairs newsletter Round 484 by Pierluigi PaganiniSecurity Affairs·Aug 11, 08:18 UTC · Aug 11, 2024Ransomware in the wild60
CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Aug 8, 20:41 UTC · Aug 8, 2024Exploit / PoC in the wildCVE-2018-0824160
Taiwan government-backed research organization targeted by APT41 hackersThe Record·Aug 1, 17:29 UTC · Aug 1, 2024Threat actor57
Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021The Hacker News·Jun 20, 13:42 UTC · Jun 20, 2024Threat actorCVE-2021-2685560
New Cross-Platform Malware 'Noodle RAT' Targets Windows and Linux SystemsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2024Malware42
Leaked documents show how firm supports Chinese hacking operationsCyberScoop·Feb 21, 23:53 UTC · Feb 21, 2024Ransomware in the wild60
Chinese malware removed from SOHO routers after FBI issues covert commandsArs Technica · Security·Jan 31, 23:34 UTC · Jan 31, 2024Malware55
Malware Takedowns Show Progress, But Fight Against Cybercrime Not OverInfosecurity Magazine·Jan 10, 15:00 UTC · Jan 10, 2024Malware30
Kaspersky malware report for Q3 2023Kaspersky Securelist·Dec 1, 16:01 UTC · Dec 1, 2023MalwareCVE-2023-23397CVE-2023-2932460
Chinese Hackers Launch Covert Espionage Attacks on 24 Cambodian OrganizationsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2023Threat actor60
Researchers Expose Space Pirates' Cyber Campaign Across Russia and SerbiaThe Hacker News·Oct 19, 13:35 UTC · Oct 19, 2023Threat actor45
Sophisticated APT Clusters Target Southeast AsiaInfosecurity Magazine·Sep 25, 17:30 UTC · Sep 25, 2023Malware55
Earth Lusca's New SprySOCKS Linux Backdoor Targets Government EntitiesThe Hacker News·Sep 20, 04:37 UTC · Sep 20, 2023MalwareCVE-2022-39952CVE-2022-40684CVE-2021-22205+3 CVEs47
Chinese Group Exploiting Linux Backdoor to Target GovernmentsInfosecurity Magazine·Sep 19, 17:15 UTC · Sep 19, 2023Malware42
Earth Lusca expands its arsenal with SprySOCKS Linux malwareSecurity Affairs·Sep 19, 07:52 UTC · Sep 19, 2023MalwareCVE-2022-40684CVE-2022-39952CVE-2021-22205+6 CVEs160
China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3The Hacker News·Aug 11, 14:08 UTC · Aug 11, 2023Malware42
Common TTPs of attacks against industrial organizationsKaspersky Securelist·Aug 10, 08:00 UTC · Aug 10, 2023Malware42
Researchers Uncover Powerful Backdoor and Custom Implant in YearThe Hacker News·May 17, 05:03 UTC · May 17, 2023Malware42