CHINA WATCH
All domains

Exploited Vulnerabilities

Publicly known CVEs and living-off-the-land tradecraft that PRC actors rely on for initial access and persistence.

3 dated entries · all sources public and unclassified
to
3 of 3 entries
  1. Feb 7, 2024
    mediumtactical

    Joint guide on identifying and mitigating living off the land techniques

    Detection information and mitigations for living off the land activity, which remains effective because many organizations lack the logging and baselining needed to spot abuse of built-in tools.

    Volt TyphoonMultiple actors
    CISA joint guide
  2. Oct 6, 2022
    hightactical

    Top CVEs actively exploited by PRC state-sponsored actors

    CISA, NSA and FBI published the top Common Vulnerabilities and Exposures used by PRC state-sponsored actors since 2020, most of them in internet-facing network devices and services.

    PRC state-sponsored actors
    CISA AA22-279A
  3. Mar 3, 2021
    criticaltactical

    Active exploitation of Microsoft Exchange Server vulnerabilities

    CISA partners observed active exploitation of Exchange Server vulnerabilities, with tactics, techniques and indicators of compromise published for defenders.

    HAFNIUM
    CISA AA21-062A