Dec 5, 11:06 AM

Chinese Hackers Target U.S. Organizations in Four-Month Cyberattack; CISA Warns of CVE-2024-51378 and CVE-2024-10905 Vulnerabilities

Chinese hackers have been implicated in a series of cyberattacks targeting U.S. organizations, including a significant four-month intelligence-gathering operation against an unspecified entity with a notable presence in China. According to reports, the attack involved the exploitation of vulnerabilities in various systems, including Exchange Servers, and utilized tools such as FileZilla and PowerShell. The Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings regarding critical vulnerabilities, including CVE-2024-51378 and CVE-2024-10905, both rated with a CVSS score of 10, indicating their severity. Additionally, hundreds of Cisco switches have been affected by a bootloader flaw, further highlighting the ongoing cybersecurity threats posed by Chinese actors. These incidents underscore the broader issue of foreign cyber espionage against U.S. networks, with indications that similar activities are occurring in multiple countries.

#China #Exchange Servers #FileZilla #PowerShell #CISA #Cisco #Chinese

Written with ChatGPT (GPT-4o mini).

Sources

Additional media

Image #1 for story chinese-hackers-target-u-s-organizations-four-month-cyberattack-cisa-warns-cve-b0dc0bf4