The Chinese threat group used the newly discovered KV-botnet, made up of compromised SOHO devices, as a stealth data transfer network during attacks on U.S. and Asian targets.
Hundreds of outdated Fortinet, Cisco, and Netgear small office home office routers, some of which were in high-value networks, have been leveraged by Chinese advanced persistent threat operation Volt Typhoon to form the sophisticated KV-botnet and establish a covert data transfer network, reports SecurityWeek.
More than 700 smartphones from Apple, Google, Samsung, and 21 other brands have been impacted by a collection of 14 vulnerabilities dubbed 5Ghoul that concern the implementation of Qualcomm and MediaTek 5G mobile network modem firmware, according to The Hacker News.
None of the endpoint detection and response solutions from Microsoft, SentinelOne, CrowdStrike, Cybereason, and Palo Alto Networks were able to detect or prevent eight new process injection techniques using Windows thread pools to execute malicious code dubbed "Pool Party," reports SecurityWeek.
Nation-states were noted by Sen. Ron Wyden, D-Ore., to have been leveraging push notifications to enable surveillance on Apple and Google smartphones, according to TechCrunch.
