Chinese, N. Korean Threat Groups Build on Asia-Pacific Success

Recent DarkReading coverage highlights a surge in active exploitation, supply‑chain compromises, and AI‑enabled threat activity across the Asia‑Pacific and global ecosystems. Key incidents include a critical Check Point VPN zero‑day under active attack, an exploited PAN‑OS GlobalProtect authentication bypass used in multi‑wave campaigns, and Russian operators weaponizing WinRAR (CVE‑2025‑8088) for data theft and espionage. Supply‑chain campaigns continue to proliferate (Miasma worm into Microsoft GitHub repos, Hades targeting PyPI, IronWorm hitting NPM), and widespread phishing and traffic‑red