Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...] Weiterlesen: Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Intelligence View
⚡ tsecurity.de Intelligence
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand,…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
11 Bronnen
CVE-2024-13362 | Post SMTP Plugin on WordPress Parameter url cross site scripting
10 andere bronnen
VVulDB Updates4 uur geledenCVE-2024-13362 | Lightbox & Modal Popup Plugin on WordPress Parameter url cross site scripting VVulDB Updates4 uur geledenCVE-2024-13362 | XT Floating Cart for WooCommerce Plugin on WordPress Parameter url cross site scripting VVulDB Updates4 uur geledenCVE-2024-13362 | Internal Link Juicer Plugin on WordPress Parameter url cross site scripting VVulDB Updates4 uur geledenCVE-2024-13362 | Knowledge Base Documentation & Wiki Plugin on WordPress Parameter url cross site scripting VVulDB Updates4 uur geledenCVE-2024-13362 | Independent Analytics Plugin on WordPress Parameter url cross site scripting VVulDB Updates4 uur geledenCVE-2024-13362 | Optimized Minify Plugin on WordPress Parameter url cross site scripting
+4
7 Bronnen
Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours
6 andere bronnen
IIT Security News7 min. geledenTrojanized Claude Code Extension on Cursor Marketplace Exposes Users to SSH Backdoor PPost malware and hostile se…1 dag geledenGitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux. IIT Security News5 uur geledenHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GGBHackers Security5 uur geledenHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DDEV Community5 uur geledenClaude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up GGoogle Alert5 uur geledenClaude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online
6 Bronnen
IT Security News Hourly Summary 2026-10-31 13h : 8 posts
5 andere bronnen
IIT Security News40 min. geledenIT Security News Hourly Summary 2026-10-31 14h : 6 posts IIT Security News4 uur geledenIT Security News Hourly Summary 2026-10-31 10h : 11 posts IIT Security News3 uur geledenIT Security News Hourly Summary 2026-10-31 11h : 5 posts IIT Security News6 uur geledenIT Security News Hourly Summary 2026-10-31 08h : 13 posts IIT Security News5 uur geledenIT Security News Hourly Summary 2026-10-31 09h : 12 posts
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4303976/beveiligingslekken-cve/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/