Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black Lotus Labs has spent three years tracking a covert network it calls Silent Train, which it ties to Volt Typhoon, the China-linked APT group. The cybersecurity firm says the network hid... Weiterlesen: Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Intelligence View
⚡ tsecurity.de Intelligence
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black L…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Skanuj publicznie dostępne usługi za pomocą OpenVAS, naostrz zasady WAF, skróć okna łat.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
14 źródeł
Security: Denial of Service in ags (Fedora)
13 kolejnych źródeł
PPro-Linuxvor 2 Std.Security: Denial of Service in mingw-qt6-qt5compat (Fedora) VVulDB Updatesvor 3 Std.CVE-2026-121386 | FreeRDP up to 3.32.1 WinPR denial of service (Nessus ID 375599) PPro-Linux Securityvor 2 Std.Denial of Service in mingw-qt6-qt5compat (Fedora) PPro-Linux Securityvor 2 Std.Denial of Service in ags (Fedora) VVulDB Updatesvor 6 Std.CVE-2022-48492 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51188) VVulDB Updatesvor 6 Std.CVE-2022-48493 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51189)
+7
13 źródeł
CVE-2026-99257 | Linux Kernel up to 7.2.12 Gpio Shared null pointer dereference (Nessus ID 375602)
12 kolejnych źródeł
VVulDB Updatesvor 3 Std.CVE-2026-99255 | Linux Kernel up to 7.2.13 io-wq io_uring_cancel_generic cur_work race condition (Nessus ID 375597) VVulDB Updatesvor 3 Std.CVE-2026-99260 | Linux Kernel up to 7.2.12 ntfs ntfs_new_attr_flags behavioral workflow (Nessus ID 375596) VVulDB Updatesvor 3 Std.CVE-2026-99244 | Linux Kernel up to 7.3.0 pid_namespace zap_pid_ns_processes race condition (Nessus ID 375592) VVulDB Updatesvor 8 Std.CVE-2024-36978 | Linux Kernel up to 6.10-rc2 sch_multiq multiq_tune out-of-bounds write (affc18fdc694 / Nessus ID 207802) VVulDB Updatesvor 6 Std.CVE-2026-64312 | Linux Kernel up to 7.1.3 pcrypt pcrypt_aead_done improper synchronization (Nessus ID 375470) VVulDB Updatesvor 6 Std.CVE-2026-74684 | Linux Kernel up to 6.18.44/7.1.8 tap tap_get_user_xdp null pointer dereference (Nessus ID 375470)
+6
10 źródeł
PikaPods: Host Any Open-Source Apps Without a VPS Server
9 kolejnych źródeł
ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Securityvor 1 Std.Ghostunnel: Open-source TLS proxy with mutual authentication ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think DDEV Communityvor 3 Std.How I Vet an Open-Source Dependency Before Betting On It
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4306021/luki-w-bezpieczestwie-cve/volt-typhoon-used-silent-train-to-hide-zero-day-attacks/