Prolific Chinese espionage group exploits BeyondTrust zero-day

Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.

The post Prolific Chinese espionage group exploits BeyondTrust zero-day appeared first on CyberScoop.

Continue reading Prolific Chinese espionage group exploits BeyondTrust zero-day→

Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update d… Continue reading Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor→

Posted in Uncategorized

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing … Continue reading UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing→

Posted in Uncategorized