China-Linked APT15 Used Myriad of New Tools To Hack UK Government Contractor

CANCUN, Mexico – Researchers at NCC Group have discovered multiple backdoors on a UK government contractor’s computer systems designed to steal sensitive government and military data. The hack is tied to China-linked cyber espionage group APT15, which researchers said is utilizing many new tools ...

Masha and these Bears

Sofacy, also known as APT28, Fancy Bear, and Tsar Team, is a prolific, well resourced, and persistent adversary. They are sometimes portrayed as wild and reckless, but as seen under our visibility, the group can be pragmatic, measured, and agile. Our previous post on their 2017 activity stepped...

digitalchina.todayir.com XSS vulnerability

Open Bug Bounty ID: OBB-574658 Description| Value ---|--- Affected Website:| digitalchina.todayir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.chinadaily.com.cn XSS vulnerability

Open Bug Bounty ID: OBB-573875 Description| Value ---|--- Affected Website:| search.chinadaily.com.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple Moves iCloud Data and Encryption Keys for Chinese Users to China

Apple has finally agreed to open a new Chinese data center next month to comply with the country's latest controversial data protection law. Apple will now move the cryptographic keys of its Chinese iCloud users in data centers run by a state-owned company called Cloud Big Data Industrial...

Apple to Store Encryption Keys in China

Apple is bowing to pressure from the Chinese government and storing encryption keys in China. While I would prefer it if it would take a stand against China, I really can't blame it for putting its business model ahead of its desires for customer privacy. Two more articles...

Human Factor Podcast: Jenny Radcliffe and Chris Boyd

A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...

china-gov.ga XSS vulnerability

Open Bug Bounty ID: OBB-569967 Description| Value ---|--- Affected Website:| china-gov.ga Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

china-market.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-559119 Description| Value ---|--- Affected Website:| china-market.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03780)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A GetXXX method SQL injection remote...

Multiple Huawei Products Read Across Boundaries Vulnerability

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An out-of-bounds read vulnerability exists in several Huawei products due to the program failing to properly handle malformed H323 messages. A remote...

Weak Password Vulnerability in iClock Series Data Services of Zhongguancun Attendance Management System

Ltd. is the sales and service organization in Shanghai of the famous biometrics and RFID products provider, China Control Technology. A weak password vulnerability exists in the iClock series of data services of the Time and Attendance Management System TAMS, which can be exploited by attackers t...

Watch Out! New Cryptocurrency-Mining Android Malware is Spreading Rapidly

Due to the recent surge in cryptocurrency prices, threat actors are increasingly targeting every platform, including IoT, Android, and Windows, with malware that leverages the CPU power of victims' devices to mine cryptocurrency. Just last month, Kaspersky researchers spotted fake antivirus and...

Google Chrome for Mac, Windows and Linux Security Bypass Vulnerability (CNVD-2018-03797)

Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A security vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux platforms. A remote attacker can exploit this vulnerability ...

January 30, 2018 – Morning Cyber Coffee Headlines – “FDR” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 30, 2018 - Headlines Carbon Black in the News: The Three Rs of Today’s...

Command Execution Vulnerability in CM113-Z, the Smart Home Gateway of China Mobile Communications Corporation

China Mobile Smart Home Gateway CM113-Z is a universal gateway device from China Mobile. A command execution vulnerability exists in the CM113-Z, a smart home gateway from China Mobile Communications. An attacker can exploit the vulnerability to execute arbitrary system commands on the device...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2018-02633)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A buffer overflow vulnerability exists in previous versions of Mozilla Firefox 58. An attacker could exploit this vulnerability to cause a denial of service crash...

SMS Bombing Vulnerability in Air China's Android Client

Air China Android client is an airplane flight inquiry service software. An SMS bombing vulnerability exists in the Air China Android client - Zhiyin Mall at the order submission. An attacker is allowed to replay this interface for SMS bombing, which constitutes system resource consumption...

Article from a Former Chinese PLA General on Cyber Sovereignty

Interesting article by Major General Hao Yeli, Chinese People's Liberation Army ret., a senior advisor at the China International Institute for Strategic Society, Vice President of China Institute for Innovation and Development Strategy, and the Chair of the Guanchao Cyber Forum. Against the...

Hangzhou Hechat Technology Co., Ltd. and Hechat APP suffers from arbitrary number registration and arbitrary password reset vulnerability

Wochat App is a business socialization software. Ltd. and Chat APP has an arbitrary number registration and arbitrary password reset vulnerability. The vulnerability is due to the lack of restrictions on verification code verification, an attacker can register any account and reset any password b...