Topic: chinese threat actor
-
Chinese Hackers Exploiting VMware Zero-Day Since 2025
A critical privilege escalation vulnerability (CVE-2025-41244) in Broadcom's VMware software has been actively exploited since October 2024, allowing attackers to gain root-level control over affected virtual machines. The exploitation has been attributed to UNC5174, a Chinese state-sponsored thr...
Read More » -
China-Linked Hackers Exploited Dell Zero-Day Since 2024
A China-linked cyberespionage group exploited a critical Dell software vulnerability (CVE-2026-22769) for over a year, using it to implant stealthy backdoors and maintain persistent access in targeted networks. The attackers deployed advanced tools like the BRICKSTORM and GRIMBOLT backdoors, move...
Read More » -
CISA Urges Immediate VMware Patch for Chinese Hacker Exploit
CISA has issued an urgent directive for U.S. government agencies to patch a critical VMware vulnerability (CVE-2025-41244) that allows privilege escalation to root level, requiring action within three weeks. The vulnerability is actively exploited by UNC5174, a Chinese state-sponsored group, whic...
Read More »