NEWSROOM

The moderate-severity vulnerability has been observed being exploited in the wild by Chinese APT Velvet Ant.

A newly patched zero-day vulnerability was exploited by Chinese state-backed hackers to compromise Cisco Nexus switches, researchers have revealed.

Cisco fixed an actively exploited NX-OS zero-day, the flaw was exploited to install previously unknown malware as root on vulnerable switches.

Chinese state-backed hacking group Velvet Ant targeted Cisco network switches with NX-OS software impacted by the newly discovered zero-day, tracked as CVE-2024-20399, as part of a cyberespionage attack in April, according to The Record, a news site by cybersecurity firm Recorded Future.

Zero-day was found granting unabated access to Chinese state-sponsored threat actors

Command injection bug being abused by suspected Chinese spies – patch up

Learn how Sygnia helps organizations prepare for and respond to emerging cyber threats.

A group of suspected Chinese cyberespionage actors named ‘Velvet Ant’ are deploying custom malware on F5 BIG-IP appliances to gain a persistent connection to the internal network and steal data

The campaign is especially notable for the remarkable lengths to which the threat actor went to maintain persistence on the target environment.