Experts details PeckBirdy, a JavaScript C2 framework used since 2023 by China-aligned attackers to spread malware via fake ...
A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.
In two separate campaigns, attackers used the JScript C2 framework to target Chinese gambling websites and Asian government ...
Since 2023, multiple security investigations have highlighted a growing trend in which China-linked threat actors ...