China-Backed Hackers Backdoor US Carrier-Grade Juniper MX Routers

Mandiant researchers found the routers of several unnamed organizations (likely telcos and ISPs) were hacked by UNC3886, and contained a custom backdoor called "TinyShell."

Mar. 13, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

China-Backed Hackers Backdoor US Carrier-Grade Juniper MX Routers‎ Mandiant researchers found the routers of several unnamed organizations (likely telcos and ISPs) were hacked by UNC3886, and contained a custom backdoor called "TinyShell."‎‎ Keep Reading →

Apple Drops Another WebKit Zero-Day Bug‎‎ A threat actor leveraged the vulnerability in an "extremely sophisticated" attack on targeted iOS users, the company says.‎‎

Volt Typhoon Strikes Massachusetts Power Utility‎‎ The prolonged attack, which lasted 300+ days, is the first known compromise of the US electric grid by the Voltzite subgroup of the Chinese APT; during it, the APT attempted to exfiltrate critical OT infrastructure data.‎‎

'Ballista' Botnet Exploits 2023 Vulnerability in TP-Link Routers‎‎ In the past, the vulnerability was exploited to drop Mirai botnet malware. Today, it's being used once more for another botnet campaign with its own malware.‎‎

OpenAI Operator Agent Used in Proof-of-Concept Phishing Attack‎ Researchers from Symantec showed how OpenAI's Operator agent, currently in research preview, can be used to construct a basic phishing attack from start to finish.‎

DR GLOBAL

Abu Dhabi Guidelines Offer Blueprint for Cybersecurity in Health‎ Following increasing attacks on healthcare organizations, the United Arab Emirates has refined its regulatory strategy for improving cybersecurity in healthcare.‎

THE EDGE

NIST Finalizes Differential Privacy Rules to Protect Data‎ The National Institute of Standards and Technology (NIST) has released updated differential privacy guidelines for organizations to follow to protect personally identifiable information when sharing data.‎

DR TECHNOLOGY

F5 Integrates API Security and Networking to Address AI Onslaught‎ The new The F5 Application Delivery Controller and Security Platform combines BIG-IP, NGNIX and Distributed Cloud Services and new AI Gateway and AI Assistants.‎

SPONSORED ARTICLE

5 SIEM Capabilities Needed to Modernize Your SOC‎‎ Staying ahead of adversaries in the AI era requires embracing an innovative SIEM that transforms the way security operations centers function.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

The CISO as Business Resilience Architect‎ To truly become indispensable in the boardroom, CISOs need to meet the dual demands of defending against sophisticated adversaries while leading resilience strategies.‎‎

When Seconds Count: How to Survive Fast-and-Furious DDoS Microbursts‎ In the battle against two-minute micro-attacks that can knock out critical communication services, the difference between success and failure can literally come down to seconds.‎‎

More Commentary →

- Upcoming Events -

Apr 3, 2025 Memory Safety & Exploit Management: Real-World Attacks & Defenses

Jun 19, 2024 Preventing Attackers From Wandering Through Your Enterprise Infrastructure

Mar 20, 2025 [Dark Reading Virtual Event] Cybersecurity's Most Promising New and Emerging Technologies

More Events →

- More Resources -

WHITE PAPER Tips on Managing Cloud Security in a Hybrid Environment

WHITE PAPER Frost Radar: Cloud Security Posture Management, 2024

WHITE PAPER 4 Best Practices for Hybrid Security Policy Management

REPORT Building Blocks for Next-Gen Security Operations

More Resources →

- Elsewhere in Cyber Today -

LOOKOUT

Lookout Discovers New Spyware by North Korean APT37

TECHTARGET SEARCH SECURITY

Incident Response for Web Application Attacks

MALWAREBYTES

How Mirror Sites Help Gambling Scams Thrive

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US