China — OPM Hack was not State-Sponsored; Blames Chinese Criminal Gangs

In the most surprising manner, the Chinese government said it arrested criminal hackers behind the massive cyber attack on US Office of Personnel Management OPM earlier this year, dismissing its involvement. Three months back, we reported that China arrested a handful of hackers within its border...

China APT Gang Targets Hong Kong Media via Dropbox

An APT gang linked to China and alleged to be responsible for targeted attacks against foreign governments and ministries, has now pointed its focus inward at China’s autonomous territory Hong Kong. An August attack against several media companies in Hong Kong was carried out shortly after a...

China-based Cyber Threat Group Uses Dropbox for Malware Communications and Targets Hong Kong Media Outlets

FireEye Threat Intelligence analysts identified a spear phishing campaign carried out in August 2015 targeting Hong Kong-based media organizations. A China-based cyber threat group, which FireEye tracks as an uncategorized advanced persistent threat APT group and other researchers refer to as...

China-based Cyber Threat Group Uses Dropbox for Malware Communications and Targets Hong Kong Media Outlets

FireEye Threat Intelligence analysts identified a spear phishing campaign carried out in August 2015 targeting Hong Kong-based media organizations. A China-based cyber threat group, which FireEye tracks as an uncategorized advanced persistent threat APT group and other researchers refer to as...

JBOSS found Java deserialization remote command execution vulnerability-vulnerability warning-the black bar safety net

Recently, many articles on the jboss java deserialization vulnerability the article vibe in the network. So in the end is not as long as with jboss will the existence of this vulnerability? And this vulnerability in the end how much? What is deserialization vulnerability? In fact, the java...

用友某系统通用漏洞涉及多家银行、证券、能源行业、企业

简要描述： 用友某系统通用漏洞可以读取配置文件 详细说明： 用友某系统通用漏洞涉及多家银行、证券、能源行业、企业 测试了部分网站，还有大量的网站存在此漏洞 http://zhaopin.cnooc.com.cn/hrss/dorado/smartweb2.RPC.d?rpc=true http://nc.hbny.com.cn:9090/hrss/dorado/smartweb2.RPC.d?rpc=true http://59.173.0.46:8070/hrss/dorado/smartweb2.RPC.d?rpc=true...

Linux kernel local information disclosure vulnerability (CNVD-2015-07402)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to exploit the vulnerability to gain access to sensitive memory information...

China Chopper Caidao PHP Backdoor Code Execution Exploit

This Metasploit module takes advantage of the China Chopper Webshell that is commonly used by Chinese hackers. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'China Chopper Caidao...

China Chopper Caidao PHP Backdoor Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'China Chopper Caidao PHP Backdoor Code Execution', 'Description' = %q This module takes advantage of the China Chopper Webshell that...

tel-supplier-china.com XSS vulnerability

Open Bug Bounty ID: OBB-101358 Description| Value ---|--- Affected Website:| tel-supplier-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

XcodeGhost Malware Supports iOS9

New samples of XcodeGhost, malware targeting iOS devices, have surfaced beyond the borders of China with new support for iOS9 and obfuscation techniques making it that much harder to detect. iOS9 is only a few weeks old and included new security measures that allowed for only secure HTTPS...

Kaspersky Anti-Virus 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Anti-Virus is a suite of antivirus software developed by the Russian Kaspersky Lab. An authentication bypass vulnerability exists in Kaspersky Anti-Virus 'avp.exe', which allows remote attackers to bypass authentication mechanisms and perform unauthorized operations...

search.china-airlines.com XSS vulnerability

Vulnerable URL: http://search.china-airlines.com/www/search.asp?select=http://www.china-airlines.com/ch/index.htm="=4=root=1 Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

China Chopper Caidao PHP Backdoor Code Execution

This module takes advantage of the China Chopper Webshell that is commonly used by Chinese hackers. Module Options msf use exploit/multi/http/caidao/phpbackdoorexec msf undefinedphpbackdoorexec show actions ...actions... msf undefinedphpbackdoorexec set ACTION msf undefinedphpbackdoorexec show...

South Korea Signs Up to Cyber Theft Pledge

On Friday the Obama administration secured its second win toward establishing a new norm in cyberspace. The Joint Fact Sheet published by the White House includes the following language: "no country should conduct or knowingly support cyber-enabled theft of intellectual property, trade secrets, o...

Latest Microsoft Transparency Report Details Content Removal Requests

Microsoft launched a new transparency website this week that bundles reports detailing requests for data the company has received, including those from law enforcement, the government, and elsewhere. The page, which Microsoft is calling its Transparency Hub, is somewhat similar to what Apple did...

CyberSpace — China arrested Hackers at U.S. Government Request

For the very first time in history, China has arrested hackers within its borders at the request of the United States government. The helping hands of China made me remind of recent Hollywood movie, The Martian, in which China's CNSA helped the United States' NASA to rescue astronaut Mark Watney...

Android elevation of privilege vulnerability (CNVD-2015-06566)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. Android suffers from an elevation of privilege vulnerability that allows an attacker to gain privileges through a carefully crafted application...

YiSpecter Apple iOS Malware Distributes Adware

Researchers warned that the November unveiling of the WireLurker malware targeting Apple platforms could turn out to be a blueprint for Mac and iOS malware writers. While WireLurker was quickly squashed and proved to be fairly benign, its authors demonstrated how the abuse of Apple-issued...

NeoKylin: China's Linux OS that Seriously Looks Like Windows XP

Do You Know: China has planned to eliminate all foreign Technologies and Services by 2020, just like Google and Facebook. And it seems China in some years would be an entirely independent IT economy; building homegrown Mobile and computer devices, Operating Systems, Applications, Browsers and...