Chinese state-sponsored hacking group "Salt Typhoon" has breached Canadian telecommunications infrastructure, exploiting an unpatched Cisco vulnerability (CVE-2023-20198) to compromise three network devices in February 2025. The attackers established unauthorized access to collect network ...
A newly identified APT group, UAT-5918, is targeting Taiwan's critical infrastructure, IT, telecommunications, academia, and healthcare sectors since 2023. The threat actor exploits unpatched vulnerabilities in web servers to establish long-term access for information theft. They deploy sp...
A Chinese hacker, Guan Tianfeng, has been charged for orchestrating a massive 2020 cyber attack that exploited a zero-day vulnerability in Sophos firewalls, affecting 81,000 devices worldwide and 36 U.S. critical infrastructure companies. The U.S. has sanctioned both Guan and his employer,...
U.S. Treasury sanctions Chinese cybersecurity firm Sichuan Silence and employee Guan Tianfeng for orchestrating massive Ragnarok ransomware attacks in 2020, which compromised 81,000 Sophos XG firewalls globally and targeted 36 U.S. critical infrastructure companies through zero-day vulnera...
