Chinese hackers install backdoors via Cisco email zero-day

21 Mwezi wa kumi na mbili, 2025

Imeripotiwa na AI

Cisco Talos has detailed how a Chinese-linked group is exploiting an unpatched zero-day in email security appliances since late November 2025, deploying backdoors and log-wiping tools for persistent access.

Building on initial reports from December 19, Cisco Talos researchers revealed more on the zero-day campaign targeting email security appliances. The suspected Chinese-linked group roots devices to install backdoors and tools that erase logs, enabling stealthy persistence likely for espionage.

No patch is available yet, prompting urgent monitoring for anomalous activity. This aligns with patterns of state-sponsored attacks on network hardware, emphasizing zero-day risks in enterprise defenses.

Makala yanayohusiana

Illustration of a cyber attack on Cisco devices, showing analysts monitoring screens with code and warnings in a dark operations room.

Operation Zero Disco exploits Cisco SNMP flaw for rootkits

17 Mwezi wa kumi, 2025 Imeripotiwa na AI Picha iliyoundwa na AI

Cyber threat actors in Operation Zero Disco have exploited a vulnerability in Cisco's SNMP service to install persistent Linux rootkits on network devices. The campaign targets older Cisco switches and uses crafted packets to achieve remote code execution. Trend Micro researchers disclosed the attacks on October 16, 2025, highlighting risks to unpatched systems.

Cisco email security products targeted in zero-day campaign

Two groups linked to China are exploiting a newly discovered vulnerability in Cisco's email security products. The campaign involves zero-day attacks, highlighting ongoing cybersecurity risks. The issue was reported on December 19, 2025.

Dell zero-day flaw unpatched for nearly two years

18 Mwezi wa pili, 2026 Imeripotiwa na AI

A security vulnerability in Dell software has reportedly remained unpatched for almost two years, allowing Chinese hackers to exploit it. The flaw involves hardcoded login credentials in a tool, raising concerns about data security.

Siasa

Chinese cyberattacks on Taiwan average 2.6 million daily in 2025

Teknolojia

North Korean hackers exploit maximum severity React2Shell flaw

Teknolojia

Google report warns of shifting cloud threat landscape

Check Point discovers advanced VoidLink Linux malware for clouds

Security researchers at Check Point have uncovered VoidLink, a sophisticated new Linux malware framework designed to target cloud infrastructures. Written in Zig and linked to Chinese developers, it features over 30 plugins for stealthy reconnaissance, credential theft, and lateral movement. No real-world infections have been observed yet, but its capabilities signal a growing threat to enterprise cloud environments.

Dutch intelligence accuses Russia of hacker attacks on WhatsApp and Signal

11 Mwezi wa tatu, 2026 Imeripotiwa na AI

Journalists reported mysterious phishing attempts by unknowns a few weeks ago. The Dutch secret service now holds Russia responsible for attacks on the messaging apps WhatsApp and Signal. The report explains how the attacks work and how users can protect themselves.

Russian hackers use Linux VMs to hide malware on Windows

Pro-Russian hackers known as Curly COMrades are exploiting Microsoft's Hyper-V technology to embed lightweight Alpine Linux virtual machines within compromised Windows systems. This tactic allows them to run custom malware like CurlyShell and CurlCat undetected by traditional endpoint detection tools. The campaign, uncovered by Bitdefender in collaboration with the Georgian CERT, targets organizations in Europe and beyond.

Veeam patches three critical security flaws in backup servers

13 Mwezi wa tatu, 2026 Imeripotiwa na AI

Veeam has addressed three critical-severity security vulnerabilities that could expose backup servers to remote code execution attacks. The company issued patches to mitigate these risks. The announcement highlights ongoing concerns in cybersecurity for data protection tools.

Jumamosi, 7. Mwezi wa tatu 2026, 21:02:03

Chinese hackers install backdoors via Cisco email zero-day

Makala yanayohusiana

Operation Zero Disco exploits Cisco SNMP flaw for rootkits

Cisco email security products targeted in zero-day campaign

Dell zero-day flaw unpatched for nearly two years

Chinese cyberattacks on Taiwan average 2.6 million daily in 2025

North Korean hackers exploit maximum severity React2Shell flaw

Google report warns of shifting cloud threat landscape

Check Point discovers advanced VoidLink Linux malware for clouds

Dutch intelligence accuses Russia of hacker attacks on WhatsApp and Signal

Russian hackers use Linux VMs to hide malware on Windows

Veeam patches three critical security flaws in backup servers

Fake IT support scam infects company devices with Havoc malware

Zyxel warns of critical RCE flaw in over a dozen routers

Russian hackers exploit Microsoft Office vulnerability days after patch

Fortinet FortiGate devices face automated attacks creating rogue accounts

China directs firms to halt use of US and Israeli cybersecurity software

Congressional staff emails hacked in Salt Typhoon campaign

China-linked UAT-7290 targets telecoms with Linux malware

React2Shell exploits continue with large-scale Linux backdoor deployments and cloud credential theft

China-nexus groups and cybercriminals ramp up React2Shell exploits

Alleged Salt Typhoon hackers received Cisco training

Tovuti hii inatumia vidakuzi