Chinese hackers breach US local governments using Cityworks zero-day

Published on May 22, 2025

Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States. [...]

Continue reading on website
Other news

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

May 22, 2025
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD)."The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement," Akamai security researcher Yuval Gordon said in a

Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies

May 22, 2025
Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach high-profile organizations worldwide. [...]