A Chinese-speaking threat actor has exploited vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to compromise 996 devices and steal over 18,500 database records from government systems.
The campaign targeted security gaps in commonly deployed networking and content management infrastructure, gaining access to sensitive government data stored in backend databases.
ZyXEL GS1900 switches, used for network management across many organizations, contained exploitable flaws that allowed attackers to bypass authentication. WordPress installations with unpatched vulnerabilities provided additional entry points.
The threat actor systematically compromised devices across multiple targets, demonstrating persistent access to steal data at scale. The 18,500+ records extracted suggest sustained presence within affected networks.
Organizations running these products should immediately patch systems and audit access logs for suspicious activity. ZyXEL and WordPress maintainers have released security updates addressing the exploited vulnerabilities. Network administrators should prioritize updates for internet-facing devices and implement additional monitoring on switched infrastructure.
Government agencies affected are reviewing the scope of compromised data and notifying relevant stakeholders.
GrapheneOS, a privacy-focused Android fork, is on track to ship preinstalled on commercial devices within three years. The project has gained significant momentum in developer circles.
The ShinyHunters extortion gang claims it breached FBI systems using a previously unknown Oracle PeopleSoft vulnerability, stealing sensitive data on employees and job applicants. The group also defaced the FBI's jobs website.
ShinyHunters claims to have breached the FBI and stolen personal information belonging to agents and job applicants. The alleged theft could expose agents and their families to extortion and counterintelligence threats.
An IT mistake at English hospitals resulted in the loss of 11 years of viewing history for maternity patient records. Hospital staff recovered the underlying patient care data, though access logs remain unrecoverable.