China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation
2026-03-16T13:24:09Z•71673c5caa0a444f19d62e85e6bbf5679dfca8935645d19a14eb727f448d0801
china-linkedcredential-theftcritical-vulnerabilitydata-breachespionageforcememogithub-compromiseglasswormhpe-aos-cxiran-linkedlinux-apparmorn8n-exploitnation-statepersistent-footholdphishingprivilege-escalationseo-poisoningslopolystorm-2561supply-chaintrojanvpn
What happened
Multiple high-impact cyber incidents and vulnerabilities were reported: China-linked state-sponsored actors conducted long-running espionage against Asian militaries using custom tooling and persistent access; Storm-2561 is running an SEO-poisoning campaign delivering fake VPN clients, trojans and credential theft; dozens-to-hundreds of GitHub/Python repositories were compromised after VS Code GlassWorm-related credential theft (ForceMemo activity). A suspected hack against Poland’s nuclear research center may be Iran-linked. Several breaches and phishing incidents affected organizations and人员
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 71673c5caa0a444f19d62e85e6bbf5679dfca8935645d19a14eb727f448d0801
- Enrichment time
- 2026-03-16T13:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.