AWS: China-linked threat actors weaponized React2Shell hours after disclosure
AWS: China-linked threat actors weaponized React2Shell hours after disclosure Pierluigi Paganini December 08, 2025 Multiple China-linked threat actors began exploiting...
China
Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
Dec 05, 2025Ravie LakshmananVulnerability / Software Security Two hacking groups with ties to China have been observed weaponizing the newly...
BRICKSTORM backdoor exposed: CISA warns of advanced China-backed intrusions
BRICKSTORM backdoor exposed: CISA warns of advanced China-backed intrusions Pierluigi Paganini December 05, 2025 CISA details BRICKSTORM, a China-linked backdoor...
Scam USPS and E-Z Pass Texts and Websites
Google has filed a complaint in court that details the scam: In a complaint filed Wednesday, the tech giant...
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack Pierluigi Paganini November 16, 2025 China-linked actors used Anthropic’s AI to...
Chinese Hackers Use Anthropic’s AI to Launch Automated Cyber Espionage Campaign
State-sponsored threat actors from China used artificial intelligence (AI) technology developed by Anthropic to orchestrate automated cyber attacks as part...
Australia’s spy chief warns of China-linked threats to critical infrastructure
Australia’s spy chief warns of China-linked threats to critical infrastructure Pierluigi Paganini November 12, 2025 Australia’s spy chief warns China-linked...
Denmark and Norway investigate Yutong bus security flaw amid rising tech fears
Denmark and Norway investigate Yutong bus security flaw amid rising tech fears Pierluigi Paganini November 10, 2025 Denmark and Norway...
Crypto-less Crypto Investment Scams: A California Case
My readers will know by now that I am addicted to PACER – the Public Access to Court Electronic...
Smashing Security podcast #442: The hack that messed with time, and rogue ransom where negotiators
Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock —...
Why Israel Just Banned 700 Chinese Cars from Its Military—And What It Means for Security
In early November, the Israeli Defense Forces made a decision that sent ripples through defense and cybersecurity circles worldwide:...
China-linked UNC6384 exploits Windows zero-day to spy on European diplomats
China-linked UNC6384 exploits Windows zero-day to spy on European diplomats Pierluigi Paganini November 01, 2025 A China-linked APT group UNC6384...
Suspected Chinese actors compromise U.S. Telecom firm Ribbon Communications
Suspected Chinese actors compromise U.S. Telecom firm Ribbon Communications Pierluigi Paganini October 31, 2025 A nation-state actor, likely a China-nexus...
BRONZE BUTLER exploits Japanese asset management software vulnerability
In mid-2025, Counter Threat Unit™ (CTU) researchers observed a sophisticated BRONZE BUTLER campaign that exploited a zero-day vulnerability in Motex...
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft’s July Patch
Oct 22, 2025Ravie LakshmananCyber Espionage / Vulnerability Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft...
