The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy malware on 81,000 firewalls.

The members cited concerning news reports, including the exploitation of a zero-day vulnerability by parent company Pinduoduo in 2023.

The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.

The flaw, called ‘0.0.0.0 day,’ has to do with how browsers handle network requests.

Verizon’s annual data breach report identified the MOVEit hack as the “poster child” of the phenomenon.

A trio of top brass for Mandiant shared the emerging advanced tactics, techniques and procedures that they see troubling cyber professionals.