Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale... Weiterlesen: Chinese Government-linked Cyber Threat Actors Combine Automated and H…
Intelligence View
⚡ tsecurity.de Intelligence
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
16 Quellen
CVE-2026-88131 | Microsoft Dataverse deserialization (EUVD-2026-95397 / WID-SEC-2026-3832)
15 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-93951 | Bracketweb Zeinet Plugin up to 1.0.0 on WordPress cross site scripting (EUVD-2026-96291) VVulDB Updatesvor 3 Std.CVE-2026-103478 | codename065 Premium Packages Plugin up to 7.2.6 on WordPress phone/state/taxid/email cross site scripting (EUVD-2026-96290) VVulDB Updatesvor 3 Std.CVE-2026-97340 | meFusion Avada up to 7.16.1 on WordPress Author Page get_markup cross site scripting (EUVD-2026-96288) VVulDB Updatesvor 3 Std.CVE-2026-93746 | WebToffee PDF Invoices Packing Slips Delivery Notes & Shipping Labels Plugin print_document_from_the_mail_link resource injection (EUVD-2026-96289) VVulDB Updatesvor 3 Std.CVE-2026-102291 | meum Kirki Plugin up to 6.3.1 on WordPress Shortcode Execution replace_content display_name command injection (EUVD-2026-96287) VVulDB Updatesvor 3 Std.CVE-2026-102774 | BrainstormForce SureDash Plugin up to 1.12.1 on WordPress Post Content cross site scripting (EUVD-2026-96285)
+9
14 Quellen
CVE-2026-107937 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Parser denial of service (WID-SEC-2026-3824)
13 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-100227 | Apache CXF up to 3.6.12/4.1.8/4.2.3 JAX-RS XML Signature Interceptors data authenticity (WID-SEC-2026-3824) VVulDB Updatesvor 1 Std.CVE-2026-108039 | Apache CXF up to 3.6.12/4.1.8/4.2.3 StaxUtils denial of service (WID-SEC-2026-3824) VVulDB Updatesvor 1 Std.CVE-2026-73179 | Apache CXF up to 3.6.12/4.1.8/4.2.3 JPA OAuth2 Authorization Code Grant Provider race condition (WID-SEC-2026-3824) VVulDB Updatesvor 1 Std.CVE-2026-107938 | Apache CXF up to 3.6.12/4.1.8/4.2.3 cxf-rt-transports-http-netty-client certificate validation (WID-SEC-2026-3824) VVulDB Updatesvor 1 Std.CVE-2026-78384 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Compression Utils CompressionUtils.inflate resource consumption (WID-SEC-2026-3824) VVulDB Updatesvor 1 Std.CVE-2026-79650 | Apache CXF up to 3.6.12/4.1.8/4.2.3 OIDC relying-party component state redirect (WID-SEC-2026-3824)
+7
11 Quellen
CVE-2018-12022 | Oracle Clusterware 12.1.0.2.0 TFA Collector deserialization (ID 176909 / BID-107585)
10 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2018-12022 | FasterXML jackson-databind up to 2.7.9.3/2.8.11.1/2.9.5 Default Typing deserialization (Bug 1671098 / ID 176635) VVulDB Updatesvor 4 Std.CVE-2018-14718 | Oracle JDeveloper 12.1.3.0.0/12.2.1.3.0 jackson-databind deserialization (ID 176635 / BID-106601) VVulDB Updatesvor 4 Std.CVE-2018-14718 | Oracle Retail Merchandising System 15.0/16.0 Documentation deserialization (ID 176635 / BID-106601) VVulDB Updatesvor 4 Std.CVE-2018-14718 | Oracle WebCenter Portal 12.2.1.3.0 AntiSamy deserialization (Nessus ID 121251 / ID 176635) VVulDB Updatesvor 4 Std.CVE-2018-14718 | Oracle Financial Services Analytical Applications Infrastructure Jasper Project deserialization (Nessus ID 121251 / ID 176635) VVulDB Updatesvor 4 Std.CVE-2018-14718 | Oracle Banking Platform 2.5.0/2.6.0/2.6.1/2.6.2 Jasper Project deserialization (Nessus ID 121251 / ID 176635)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4260037/it-security-nachrichten/chinese-government-linked-cyber-threat-actors-combine-automated-and-hands-on-hacking-tools-to-steal-sensitive-data/