October 30, 2025

BRONZE BUTLER exploits Japanese asset management software vulnerability

The threat group targeted a LANSCOPE zero-day vulnerability (CVE-2025-61932)

Threat Research

June 05, 2024

Operation Crimson Palace: A Technical Deep Dive

Security OperationsThreat Research

June 05, 2024

Operation Crimson Palace: Sophos threat hunting unveils multiple clusters of Chinese state-sponsored activity targeting Southeast Asian government

Threat clusters targeted a government agency for cyberespionage in a campaign that had precursors dating back to early 2022.

Threat Research

June 30, 2020

iOS 14 flags TikTok, 53 other apps spying on iPhone clipboards

TikTok, for one, promised to knock this off months ago but was caught red-handed, still at it, by the new clipboard notification in iOS 14.

Naked Security

April 22, 2020

Gaming company targeted by Chinese Winnti hackers

Far from pausing operations during the COVID-19 pandemic, China’s notorious Winnti hacking group has been busy launching new attacks on targets, researchers say.

Naked Security

March 23, 2020

Tour guide/Chinese spy gets four years for SD card dead drops

The dead drops were very James Bond: once, the data mule taped the SD card to the underside of a desk in a hotel.

Naked Security

March 16, 2020

Senate bill would ban TikTok from government phones

Concerns over cybersecurity risk and possible spying by China have already brought about bans from DHS, DoD, TSA, and the State Department.

Naked Security

February 12, 2020

US charges four Chinese military members with Equifax hack

The indictment suggests the hack was part of a series of major data thefts organized by Chinese military and intelligence agencies.

Naked Security

February 11, 2020

Officials raise alarm about Chinese hacking

Officials pointed to ongoing threats against US institutions, painting a dire picture of hacking efforts to support Chinese economic goals.

Naked Security