Tag: UNC5221

RESURGE Is Still on Your Ivanti Gear — Dormant, Waiting, Hiding

RESURGE Is Still on Your Ivanti Gear — Dormant, Waiting, Hiding
~ larshilse ~ Leave a comment

I hadn't even finished my second coffee after writing about China's UNC5221 carpet-bombing organisations globally, and CISA decides to drop an updated malware analysis report that should make every network defender in the room deeply, personally uncomfortable. RESURGE is still out there. On Ivanti Connect Secure devices. Possibly yours. Dormant. Undetected. Sipping a metaphorical coffee … Continue reading RESURGE Is Still on Your Ivanti Gear — Dormant, Waiting, Hiding

China’s State Hackers Hit 53 Orgs Globally — Google Disrupts UNC5221

China’s State Hackers Hit 53 Orgs Globally — Google Disrupts UNC5221
~ larshilse ~ Leave a comment

Oh, for fuck's sake. Another day, another Chinese state-sponsored hacking group caught doing exactly what everyone with a security clearance and a pulse has been screaming about for the last decade. Google dropped the news on February 25th, 2026 that they'd disrupted a Chinese-linked threat actor — tracked internally as UNC5221 — that had successfully … Continue reading China’s State Hackers Hit 53 Orgs Globally — Google Disrupts UNC5221