In-depth analysis, tutorials, and insights from the cybersecurity frontlines.
China’s cybersecurity ecosystem has attracted growing attention in recent years, particularly following multiple document leaks that revealed close overlap between private security firms, red-team operators, and government-aligned cyber activity. While...
Security researchers have uncovered a large-scale malicious browser extension campaign known as GhostPoster that accumulated approximately 840,000 installs across Google Chrome, Microsoft Edge, and Mozilla Firefox before the affected extensions...
A presentation circulated in late 2025 on the Chinese white hat hacker forum butian.net offers a rare look into how China conducts large-scale cyber attack and defense training across government...
A newly uncovered intrusion campaign has revealed a highly advanced China-linked cyber attack exploiting previously undisclosed VMware ESXi vulnerabilities to escape virtual machines and gain direct control of hypervisors. The...
NordVPN has denied suffering a security breach after a threat actor named “1011” claimed to have accessed and leaked data allegedly tied to the company’s internal development systems. The denial...
A newly disclosed security flaw affecting the TOTOLINK EX200 wireless range extender can allow attackers to gain full control of the device by triggering an unintended root-level telnet service. The...
Cybersecurity researchers have uncovered a large-scale data theft operation involving malicious Chrome browser extensions that silently harvested ChatGPT and DeepSeek conversations from more than 900,000 users. The affected extensions were...
The Kimwolf botnet, an Android-based variant of the Aisuru malware family, has rapidly expanded into one of the largest active botnets observed to date. Researchers estimate that more than two...
Several popular reports and government disclosures published in early January 2026 have highlighted a sharp escalation in China-linked cyber activity targeting Taiwan’s critical infrastructure, with Taiwan’s National Security Bureau (NSB)...
Several popular AI-powered integrated development environments built on forks of Microsoft Visual Studio Code were found to expose developers to a significant software supply chain risk through their built-in extension...
A newly uncovered internal software platform sheds rare light on how China’s security apparatus controls information leakage inside its own government networks. The system, known internally as 保密管理系统, or Confidentiality...
A sophisticated ClickFix attack has been observed targeting organizations in the hospitality sector, using fake Windows Blue Screen of Death (BSOD) screens and trusted system utilities to trick users into...
