-
Sichuan Silence Sanctioned: China's Zero-Day Exploits Exposed | Salt Typhoon Still Lurking in US Telecoms
- 2024/12/16
- 再生時間： 3 分
- ポッドキャスト
カートのアイテムが多すぎます
ご購入は五十タイトルがカートに入っている場合のみです。
カートに追加できませんでした。
しばらく経ってから再度お試しください。
ウィッシュリストに追加できませんでした。
しばらく経ってから再度お試しください。
ほしい物リストの削除に失敗しました。
しばらく経ってから再度お試しください。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
Sichuan Silence Sanctioned: China's Zero-Day Exploits Exposed | Salt Typhoon Still Lurking in US Telecoms
-
サマリー
あらすじ・解説
This is your Digital Dragon Watch: Weekly China Cyber Alert podcast.
Hey there, I'm Ting, and welcome to Digital Dragon Watch, your weekly China cyber alert. Let's dive right into the latest threats and defensive measures from the past 7 days.
First off, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned Sichuan Silence Information Technology Company, Limited, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of thousands of firewalls worldwide. Guan discovered a zero-day exploit in a firewall product and used it to deploy malware to approximately 81,000 firewalls owned by thousands of businesses globally. The purpose was to steal data, including usernames and passwords, and even attempted to infect systems with the Ragnarok ransomware variant.
Meanwhile, the U.S. House of Representatives has unanimously approved the Strengthening Cyber Resilience Against State-Sponsored Threats Act, aimed at enhancing cyber resilience against Chinese state-sponsored threats. This legislation, introduced by Representatives Laurel Lee, Mark E. Green, and John Moolenaar, establishes an interagency task force led by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) to tackle extensive cybersecurity threats posed by state-sponsored cyber actors linked to the People's Republic of China (PRC).
The FBI and CISA have also issued a warning that Chinese hackers, known as Salt Typhoon, are still lurking in U.S. telecom systems. This group deeply penetrated multiple telecom companies, stealing vast amounts of data on communication patterns and even intercepting audio and text. The agencies have published guidance to help engineers and network defenders identify and remove these threat actors.
In other news, researchers have uncovered espionage tactics of China-based APT groups in Southeast Asia, using advanced tools like PlugX and reverse proxies. Additionally, the Chinese surveillance tool EagleMsgSpy has been found exploiting mobile devices since 2017.
To protect against these threats, experts recommend a proactive approach to cybersecurity. This includes regularly updating software, using robust firewalls, and implementing advanced threat detection systems. It's also crucial to stay informed about the latest attack vectors and targeted sectors.
In conclusion, the past week has seen significant China-related cybersecurity incidents, from the sanctioning of Sichuan Silence to the ongoing presence of Salt Typhoon in U.S. telecom systems. Stay vigilant, and remember, in the world of cybersecurity, knowledge is power. That's all for now. Stay safe out there.
For more http://www.quietplease.ai
Get the best deals https://amzn.to/3ODvOta
Hey there, I'm Ting, and welcome to Digital Dragon Watch, your weekly China cyber alert. Let's dive right into the latest threats and defensive measures from the past 7 days.
First off, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned Sichuan Silence Information Technology Company, Limited, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of thousands of firewalls worldwide. Guan discovered a zero-day exploit in a firewall product and used it to deploy malware to approximately 81,000 firewalls owned by thousands of businesses globally. The purpose was to steal data, including usernames and passwords, and even attempted to infect systems with the Ragnarok ransomware variant.
Meanwhile, the U.S. House of Representatives has unanimously approved the Strengthening Cyber Resilience Against State-Sponsored Threats Act, aimed at enhancing cyber resilience against Chinese state-sponsored threats. This legislation, introduced by Representatives Laurel Lee, Mark E. Green, and John Moolenaar, establishes an interagency task force led by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) to tackle extensive cybersecurity threats posed by state-sponsored cyber actors linked to the People's Republic of China (PRC).
The FBI and CISA have also issued a warning that Chinese hackers, known as Salt Typhoon, are still lurking in U.S. telecom systems. This group deeply penetrated multiple telecom companies, stealing vast amounts of data on communication patterns and even intercepting audio and text. The agencies have published guidance to help engineers and network defenders identify and remove these threat actors.
In other news, researchers have uncovered espionage tactics of China-based APT groups in Southeast Asia, using advanced tools like PlugX and reverse proxies. Additionally, the Chinese surveillance tool EagleMsgSpy has been found exploiting mobile devices since 2017.
To protect against these threats, experts recommend a proactive approach to cybersecurity. This includes regularly updating software, using robust firewalls, and implementing advanced threat detection systems. It's also crucial to stay informed about the latest attack vectors and targeted sectors.
In conclusion, the past week has seen significant China-related cybersecurity incidents, from the sanctioning of Sichuan Silence to the ongoing presence of Salt Typhoon in U.S. telecom systems. Stay vigilant, and remember, in the world of cybersecurity, knowledge is power. That's all for now. Stay safe out there.
For more http://www.quietplease.ai
Get the best deals https://amzn.to/3ODvOta