News & Press

Press Releases

Volexity in the News

2024-01-11
Ivanti Connect Secure zero-days exploited by attackers (CVE-2023-46805, CVE-2024-21887)

Help Net Security

2024-01-11
Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

The Hacker News

2024-01-10
Zerodays bei Ivanti aktiv genutzt: Connect Secure und Policy Secure sinds nicht

Heise Online

2024-01-10
Suspected Chinese hackers target US research organization in latest spying spree

CNN

2024-01-10
Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks

ArsTechnica

2024-01-10
Ivanti Warns of Connect Secure, Policy Secure Zero Days

Decipher

2024-01-10
Ivanti Reports Exploitation Of Two Zero-Day VPN Flaws

CRN

2024-01-10
Ivanti customers urged to patch vulnerabilities allegedly exploited by Chinese state hackers

Recorded Future

2024-01-10
Ivanti warns of Connect Secure zero-days exploited in attacks

BleepingComputer

2023-10-15
Women Political Leaders Summit targeted in RomCom malware phishing

Bleeping Computer

2023-09-25
From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

The Hacker News

2023-09-22
EvilBamboo : une campagne de cyber-espionnage qui ratisse large

LeMagIT

2023-07-17
Email hack prompts call for Microsoft to make security logs free

SC Magazine

2023-07-13
China Hacking Was Undetectable for Some Who Had Less Expensive Microsoft Services

The Wall Street Journal

2023-07-13
Microsoft under fire after hacks of US State and Commerce departments

Reuters

2023-07-11
Microsoft July 2023 Patch Tuesday warns of 6 zero-days, 132 flaws

Bleeping Computer

2023-07-10
APT35 Develops Mac Bespoke Malware

Dark Reading

2023-07-05
Analyzing Threat Techniques Used By XeGroup

Infosecurity Magazine

2023-06-30
Iran-Linked APT35 Targets Israeli Media With Upgraded Spear-Phishing Tools

Dark Reading

2023-06-23
Charming Kitten’s PowerStar Malware Evolves with Advanced Techniques

Infosecurity Magazine

2023-06-19
Microsoft blames Outlook and cloud outages on cyberattack

CBS News

2023-06-05
Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations

Security Week

2023-06-05
Mass exploitation of critical MOVEit flaw is ransacking orgs big and small

Ars Technica

2023-05-02
The Untold Story of the Boldest Supply-Chain Hack Ever

Wired

2023-04-03
3CX supply chain attack: What do we know?

Help Net Security

2023-04-03
North Korean Hackers Are Stealing Gmail Emails Using a Malicious Chrome Extension

CPO Magazine

2023-03-31
Pyongyang’s botched ‘SolarWinds 2.0’ heralds trouble and progress

Politico

2023-03-31
Analysis | U.S. warrant requirements for surveillance program could hamper cyber cases, FBI official warns

The Washington Post

2023-03-16
Senate to take pulse of health care sector

Politico

2023-03-15
Russian Hackers Step Up Cyber Espionage Against Ukraine, Microsoft Says

The Wall Street Journal

2022-12-07
Top 10 macOS Malware Discoveries in 2022

SentinelOne

2022-09-30
Microsoft: Two New 0-Day Flaws in Exchange Server

Krebs on Security

2022-08-17
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

Cybersecurity & Infrastructure Security Agency (CISA)

2022-08-16
CISA Warns Of Ongoing Exploitation Against Zimbra Flaws

Duo Security - Decipher

2022-08-11
Zimbra RCE Vulnerability Exploited Without Admin Privileges

Infosecurity Magazine

2022-08-11
Zimbra auth bypass bug exploited to breach over 1,000 servers

Bleeping Computer

2022-08-04
New Gmail Attack Bypasses Passwords And 2FA To Read All Email

Forbes

2022-08-03
North Korea-backed hackers have a clever way to read your Gmail

Ars Technica

2022-08-01
North Korean Hackers Use Browser Extension to Spy on Gmail and AOL Accounts

Infosecurity Magazine

2022-06-22
Why think tanks are such juicy targets for cyberspies

The Record, Recorded Future

2022-06-17
Criminal IP analysis report on zero-day vulnerability in Atlassian Confluence

Help Net Security

2022-06-16
Volexity Blames ‘DriftingCloud’ APT For Sophos Firewall Zero-Day

Security Week

2022-06-16
Sophos Firewall zero-day bug exploited weeks before fix

Bleeping Computer

2022-06-03
Atlassian Confluence Vulnerability CVE-2022-26134

Splunk

2022-06-02
Atlassian warns that Confluence zero-day is being exploited by hackers

Recorded Future, The Record

2022-06-02
Zero Day In Atlassian Confluence Under Attack

Duo Security, Decipher

2022-03-23
Chinese Cyberspies Seen Using macOS Variant of ‘Gimmick’ Malware

Security Week

2022-03-22
Custom macOS malware of Chinese hackers ‘Storm Cloud’ exposed

Bleeping Computer

2022-02-07
Email platform Zimbra issues hotfix for XSS vulnerability under active exploitation

The Daily Swig | PortSwigger

2022-02-04
Russia prepares deep fakes? Ransomware disrupts logistical services in Europe. A Chinese APT prospects European governments.

The CyberWire

2022-02-04
Gezielte Angriffe auf Zero-Day-Lücke in Zimbra

Heize Online

2022-02-04
Une faille zero day dans Zimbra exploitée contre des Etats européens

Lemonde Informatique

2022-02-04
Operation EmailThief: Zero-day XSS vulnerability in Zimbra email platform revealed

ZDNet

2022-02-03
Zimbra zero-day vulnerability actively exploited to steal emails

Bleeping Computer

2022-02-03
European governments targeted by Chinese hackers with a Zimbra webmail zero-day

The Record

2022-02-03
Volexity Warns of ‘Active Exploitation’ of Zimbra Zero-Day

SecurityWeek

2021-09-16
Republican Governors Association was hacked earlier this year

CNN

2021-08-26
China’s Microsoft Hack May Have Had A Bigger Purpose Than Just Spying

National Public Radio

2021-05-28
Russian government hackers target civil society groups after compromising USAID email marketing account

The Washington Post

2021-05-28
SolarWinds hackers are at it again, targeting 150 organizations, Microsoft warns

NBC News

2021-05-28
Head Of Cybersecurity Firm That Detected USAID Hack Explains What Happened

NPR

2021-03-24
Facebook disrupts China-based hackers it says spied on Uyghur Muslim dissidents and journalists living outside China, including in the U.S.

The Washington Post

2021-03-24
Facebook says Chinese hackers used platform to hack Uyghurs abroad

NBC News

2021-03-18
Aperture Podcast: Josh Grunzweig on Proxylogon Exchange Zero-Day Exploits

Claroty

2021-03-16
Timeline of Microsoft Exchange Server attacks raises questions

TechTarget

2021-03-14
White House Weighs New Cybersecurity Approach After Failure to Detect Hacks

The New York Times

2021-03-11
The Cybersecurity 202: More hackers jump to take advantage of a widespread Microsoft security flaw

The Washington Post

2021-03-09
Microsoft server hack has victims hustling to stop intruders

Associated Press

2021-03-09
Microsoft hack escalates as criminal groups rush to exploit flaws

Financial Times

2021-03-09
‘Really messy’: Why the hack of Microsoft’s email system is getting worse

NBC News

2021-03-09
Microsoft Exchange Server attacks: What we know so far

TechTarget

2021-03-09
The man whose team discovered the Microsoft Exchange hack drops the details on what happened

JJ Greene / WTOP & Target USA

2021-03-08
Microsoft Attack Blamed on China Morphs Into Global Crisis

Bloomberg

2021-03-08
Volexity’s Adair on MFST hack: Afraid of ransomware attack next

CNBC

2021-03-08
A Basic Timeline of the Exchange Mass-Hack

Krebs on Security

2021-03-08
Microsoft Exchange zero-day attacks: 30,000 servers hit already, says report

ZDNet

2021-03-07
Biden administration launching task force to investigate whether China orchestrated Microsoft Exchange hack

Business Insider

2021-03-07
Preparing for Retaliation Against Russia, U.S. Confronts Hacking by China

The New York Times

2021-03-06
Microsoft Server Flaws Raise Alarms at White House, DHS

The Washington Post

2021-03-06
Federal officials scramble to assess widening Microsoft Exchange Server fallout

CyberScoop

2021-03-06
Thousands of Microsoft Customers May Have Been Victims of Hack Tied to China

The New York Times

2021-03-06
China-Linked Hack Hits Tens of Thousands of U.S. Microsoft Customers

The Wall Street Journal

2021-03-06
Biden administration moving to address a global compromise by Chinese and other hackers of Microsoft email servers

The Washington Post

2021-03-05
Move over, SolarWinds: 30,000 orgs’ email hacked via Microsoft Exchange Server flaws

The Verge

2021-03-05
Chinese Hacking Spree Hit an ‘Astronomical’ Number of Victims

WIRED

2021-03-04
More Details Emerge on the Microsoft Exchange Server Attacks

Dark Reading

2021-03-04
China’s and Russia’s Spying Sprees Will Take Years to Unpack

WIRED

2021-03-03
Microsoft Issues Critical Update Warning As Chinese Hackers Attack Exchange Servers

Forbes

2021-03-03
The Cybersecurity 202: A new government watchdog report highlights urgent federal cybersecurity risks

The Washington Post

2021-03-03
Microsoft says Chinese hackers targeted groups via its server software

CNBC

2021-03-03
Microsoft: These Exchange Server zero-day flaws are being used by hackers, so update now

ZDNet

2021-03-03
Microsoft Issues Critical Update Warning As Chinese Hackers Attack Exchange Servers

Forbes

2021-03-02
Microsoft issues emergency patches for 4 exploited 0-days in Exchange

Ars Technica

2021-03-02
Microsoft Exchange Server Attacked By Chinese Hackers

CRN

2021-03-02
Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails

Krebs on Security

2021-03-02
Microsoft says Chinese hackers targeted groups via server software

Reuters

2020-12-17
Hack Suggests New Scope, Sophistication for Cyberattacks

The Wall Street Journal

2020-12-17
Federal investigators find evidence of previously unknown tactics used to penetrate government networks

The Washington Post

2020-12-15
Hacking Spree by Suspected Russians Included U.S. Think Tank

Bloomberg News

2020-11-06
Vietnamese hacking group OceanLotus uses imitation news sites to spread malware

CyberScoop

2020-11-06
Vietnamese Hackers Ran ‘Fake News’ Websites To Target Visitors

Vice

2020-07-01
China’s Software Stalked Uighurs Earlier and More Widely, Researchers Learn

The New York Times

2020-04-22
Amid Its Covid-19 Crisis, China Was Still Hacking Uighurs’ iPhones

Wired

2020-04-22
Apple iPhone May Be Vulnerable to Email Hack

The Wall Street Journal

2019-10-22
China Sharpens Hacking to Hound Its Minorities, Far and Wide

The New York Times

2019-06-11
Getting Up to Speed on Magecart

Dark Reading

2019-03-07
Details About Shadowy Hacking, Cyber Espionage Group Revealed

PC Magazine

2019-03-06
On Red Alert

Inside Higher Ed

2018-12-14
What is Magecart? Credit card-stealing malware proves hard to stop

NBC News

2018-11-20
Watering the OceanLotus: new watering hole targets Southeast Asia

SC Magazine

2018-11-09
Recently-Patched Adobe ColdFusion Flaw Exploited By APT

Threatpost

2018-11-08
Adobe ColdFusion servers under attack from APT group

ZDNet

2018-09-21
Newegg Hacked to Steal Customers’ Credit Card Data

PC Magazine

2018-08-30
Hackers latch onto new Apache Struts megavuln to mine cryptocurrency

The Register

2018-08-28
Active Attacks Detected Using Apache Struts Vulnerability CVE-2018-11776

Bleeping Computer

2018-04-17
Drupalgeddon 2 Vulnerability Used to Infect Servers With Backdoors & Coinminers

Bleeping Computer

2017-12-31
Introducing Force 47, Vietnam’s New Weapon Against Online Dissent

The Wall Street Journal

2017-11-07
Vietnam’s neighbors, ASEAN, targeted by hackers: report

Reuters

2017-07-12
Second Flash Player zero-day exploit found in Hacking Team’s data

PCWorld

2016-12-20
The state of nation-state attacks

SC Media

2016-12-13
The Perfect Weapon: How Russian Cyberpower Invaded the U.S.

The New York Times

2016-11-15
The Election Is Over, But Russia Is Still Hacking

NBC News

2016-11-14
The election is over but spammers aren’t conceding  

The Christian Science Monitor

2016-11-11
Russian Hackers Target Think Tank In Post-Election Attacks

Forbes

2016-11-10
Russian ‘Dukes’ of Hackers Pounce on Trump Win

Krebs on Security

2016-11-10
Russian Hackers Launch Targeted Cyberattacks Hours After Trump’s Win

Motherboard

2016-11-10
Suspected Russian hackers target US think tanks after election

CIO

2016-10-28
Security Experts: China Tried to Hack US-Taiwan Defense Conference 

Voice of America (VOA)

2015-11-29
On China’s fringes, cyber spies raise their game

Reuters

2015-10-08
Corporate VPNs In The Bullseye

Dark Reading

2014-10-28
Researchers identify sophisticated Chinese cyberespionage group

Ellen Nakashima, The Washington Post

2014-10-24
A Cyberwar Quietly Rages Over Hong Kong

Joshua Philipp, Epoch Times

2014-10-21
Chinese Hackers Suspected in iCloud, Website Attacks

Robert Lemos, eWeek

2014-10-16
Drupal core contains ‘highly critical’ SQL injection vulnerability

Adam Greenberg, SC Magazine

2014-10-15
FBI warns industry of Chinese cyber campaign

The Washington Post

2014-10-13
Pro-Democracy Websites in Hong Kong Have Been Compromised

Ionut Ilascu, Softpedia

2014-10-12
Hong Kong democracy activist websites compromised

Jeremy Kirk, IDG News Service / CIO

2014-10-11
China, US Standoff Deepens Over Hong Kong Protests

James T. Areddy, The Wall Street Journal

2014-08-25
Breached Retailers Harden PoS, For Now

Kelly Jackson Higgins, Dark Reading

2014-04-29
What Not To Do In a Cyberattack

Kelly Jackson Higgins, Dark Reading