CISA, Australian cyber agency issue advisory on China-based threat group quickly exploiting vulnerabilities

The Cybersecurity and Infrastructure Security Agency is working with the Australian Signals Directorate’s Australian Cyber Security Centre to offer mitigations for defending against a China-affiliated threat group known to speedily exploit software security flaws, in a new cybersecurity advisory backed by the National Security Agency, FBI and international partners.

“The advisory is based on current ACSC-led incident response investigations and shared understanding of a PRC state-sponsored cyber group, APT40 -- also known as Kryptonite Panda, GINGHAM TYPHOON, Leviathan and Bronze...