China

SOHO devices and unpatched enterprise switches are the way in.

Threat group's infrastructure "nothing short of extraordinary"

Researchers warn of risks from extending BPF beyond Linux.

Daxin malware has some really clever C2 techniques to exfiltrate intelligence

Kaspersky, NSA report critical vulns, one used in a major campaign.

APT exfiltrated data using Dropbox API, steganography to hide hoard in GitHub

Gov't, APTs likely to get more 0days as a result...