⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This CISA advisory provides guidance on detecting and mitigating Chinese state-sponsored cyber actor campaigns targeting networks worldwide. The actors focus on intelligence gathering and persistent access to sensitive systems.
Executive summary People’s Republic of China (PRC) state-sponsored cyber threat actors are targeting networks globally, including, but not limited to, telecommunications, government, transportation, lodging, and military infrastructure networks. While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and customer edge (CE) routers, they also leverage compromised devices and trusted connections to pivot into other networks.
Executive summary People’s Republic of China (PRC) state-sponsored cyber threat actors are targeting networks globally, including, but not limited to, telecommunications, government, transportation, lodging, and military infrastructure networks.
CISA released a malware analysis report on exploitation of SharePoint vulnerabilities allowing attackers to execute remote code and access sensitive data. The report details how multiple CVEs are chained for maximum impact.
Notification This report is provided "as is" for informational purposes only.
CISA received six files related to Microsoft SharePoint vulnerabilities, including an exploit chain known as ToolShell that uses CVE-2025-49706 and CVE-2025-49704. The analysis includes Base64 encoded .NET DLL binaries that retrieve machine key settings from ASP.NET applications.