China-Nexus APT 'Weaver Ant' Caught in Yearslong Web Shell Attack

The persistent threat actor was caught using sophisticated Web shell techniques against an unnamed telecommunications company in Asia.

Mar. 25, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

China-Nexus APT 'Weaver Ant' Caught in Yearslong Web Shell Attack‎‎ The persistent threat actor was caught using sophisticated Web shell techniques against an unnamed telecommunications company in Asia.‎‎ Keep Reading →

Oracle Denies Claim of Oracle Cloud Breach of 6M Records‎‎ A threat actor posted data on BreachForums from an alleged supply chain attack that affected more than 140K tenants, claiming to have compromised the cloud via a zero-day flaw in WebLogic, researchers say.‎‎

Critical 'IngressNightmare' Vulns Imperil Kubernetes Environments‎‎ More than 40% of all Internet-facing container orchestration clusters are at risk.‎‎

FBI Warns of Document Converter Tools Due to Uptick in Scams‎‎ The FBI's Denver field office says the tools will convert documents while also dropping malware and scraping users' systems for sensitive data.‎‎

US Weakens Disinformation Defenses, as Russia & China Ramp Up‎‎ Russia and China spend billions of dollars on state media, propaganda, and disinformation, while the Trump administration has slashed funding for US agencies.‎‎

Chinese Hacker Group Tracked Back to iSoon APT Operation‎‎ The group, called FishMonger or Aquatic Panda, is working under contract for the Chinese government to steal data from governmental organizations, Catholic charities, NGOs, think tanks, and more.‎‎

THE EDGE

Windows 10 End-of-Life Puts SMB at Risk‎ Upgrading the organization's Windows 10 systems to Windows 11 could potentially introduce vulnerabilities into the environment through misconfigured hardware.‎

DR TECHNOLOGY

Microsoft Gives Security Copilot Some Autonomy‎ New agentic AI capabilities in Microsoft Security Copilot will allow agents to triage threats and provide recommendations.‎

SPONSORED ARTICLE

Skuld Stealer Shows Open Source's Dark Side‎‎ Skuld Stealer is an example of malware created with open source that targets an open source platform, Discord.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

DR GLOBAL

Is the Middle East's Race to Digitize a Threat to Infrastructure?‎‎ As the region continues with its ambitious road map, cybersecurity must be woven into every step of the process.‎‎

Why Cyber Quality Is the Key to Security‎‎ The time to secure foundations, empower teams, and make cyber resilience the standard is now — because the cost of waiting is far greater than the investment in proactive security.‎‎

More Commentary →

- Upcoming Events -

Apr 15, 2025 My Server is Secure. Why Should I Bother about my Mobile App?

Apr 3, 2025 Memory Safety & Exploit Management: Real-World Attacks & Defenses

Aug 2, 2025 [Conference] Black Hat USA - August 2-7 - Learn More

More Events →

- More Resources -

WHITE PAPER EDR, SIEM, SOAR, and More: What's The Right Endpoint Strategy

WHITE PAPER Frost Radar: Cloud Security Posture Management, 2024

WHITE PAPER The State of Firewall Security: Challenges, Risks, and Solutions for Modern Networks

REPORT The State of Firewall Security: Challenges, Risks, and Solutions for Modern Networks

More Resources →

- Elsewhere in Cyber Today -

THE RECORD

Cyberattack Hits Ukrainian State Railway, Disrupting Online Ticket Sales

TRUSTWAVE

Why Principle of Least Privilege Matters More Than Ever in a World of Backdoored Large Language Models (LLMs)

CYBERSCOOP

Despite Challenges, the CVE Program is a Public-Private Partnership That Has Shown Resilience

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US