Multiple international agencies issued an advisory linking three Chinese companies to cyber-espionage campaigns targeting critical infrastructure globally. The campaigns, including Salt Typhoon and Ghost Emperor, exploited known vulnerabilities to help Chinese intelligence gather intelligence and track targets worldwide. #SaltTyphoon #GhostEmperor
Keypoints
- Over a dozen countries’ intelligence agencies linked three Chinese firms to global cyber-espionage activities.
- The Chinese companies provided cyber-related products to China’s intelligence and military units since 2021.
- The campaigns targeted sectors such as telecommunications, lodging, and transportation, aiding Chinese intelligence operations.
- Exploited vulnerabilities include CVE-2024-21887 and CVE-2024-3400, both of which are patchable security flaws.
- Authorities stress the importance of patching known vulnerabilities to prevent exploitation by cyber actors.
Read More: https://therecord.media/allied-spy-agencies-blame-chinese-companies-salt-typhoon