Chinese Hackers Breach 49 Organizations

A Chinese-speaking threat actor exploited WordPress wp2shell flaws to breach at least 49 organizations in 29 countries, stealing 18,566 records with plaintext passwords and PII from government and law-enforcement agencies. The same actor compromised 996 ZyXEL switches across 48 countries and targeted PAN-OS, Ubiquiti, and Proxmox systems, according to GreyNoise.