Latest cybersecurity reporting from selected sources.

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials

A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools

Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities

SecAlliance highlighted the evolution in smishing campaigns orchestrated by Chinese syndicates, which exploit digital wallet tokenization

Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets

Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems

Chinese hackers appear to have compromised Treasury machines via a trusted third party

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware

The FBI and CISA have confirmed that US officials’ private communications have been compromised

The attack exploits the polyfill.io domain, which was recently acquired by Funnull, a China-based entity

Cisco has patched a zero-day vulnerability exploited by a Chinese APT group to compromise Nexus switches

Chinese actor Storm-0558 compromised Outlook accounts

In an open letter, Senator Ron Wyden urged federal agencies to investigate Microsoft following a Chinese campaign that compromised US government emails