Skip to content
Threat Feed
Subscribe

Product

WebLogic Server

3 briefs RSS
high threat

Disruption of Integrity Technology Group Hacking Tools

The US government disrupted infrastructure supporting Integrity Technology Group tools MicroScan and FishHub, which Chinese state-sponsored actors, including Flax Typhoon, used to compromise critical infrastructure.

Struts +6 Flax Typhoon +1 state-sponsored intelligence-disruption critical-infrastructure espionage
3t 6i
high threat

China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group

Integrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.

Bash +12 Integrity Technology Group espionage china cyber-espionage microsoft-365 dcsync
3t 6c 2i
medium threat

Unusual Child Process Execution from Linux Web Servers

This rule detects unusual child process executions originating from web server processes on Linux systems, which attackers may use to maintain persistence on a compromised system by exploiting web server vulnerabilities.

Jira +20 persistence execution command_and_control initial_access linux webserver
2r 4t