💥 BREACHES & INCIDENTS
- FBI seizes seven domains behind Microscan and FishHub hacking tools tied to China's Integrity Tech
The FBI and Justice Department seized seven domains used by China-linked Integrity Technology Group to operate the Microscan scanning and FishHub phishing tools.- Targets included a US power company, airports in Japan and Poland, roughly 20 Taiwanese universities, a multinational NGO, and Taiwanese critical infrastructure firms.
- Microscan is a Python-based web app with over 1,300 pentest scripts probing Oracle WebLogic Server, WordPress, Jenkins, Apache Struts, OpenSSL, and Juniper ScreenOS; use traced to at least 2017.
- FishHub supported spear phishing, delivered follow-on malware for remote access, and exfiltrated specific files to company-controlled servers.
- The operation ran on a Mirai-variant botnet of infected consumer devices; seized domains include c0cc[.]cc, 98aicai[.]com, 98aicode[.]com, linkedinns[.]net, outlook3650[.]com, youtubecard[.]com, and 98aiblog[.]com.
- Court documents in the Western District of Pennsylvania link the activity to Flax Typhoon, which the FBI identifies as Integrity Technology Group, holder of Chinese government contracts.
🔓 CVEs & KEV
- CVE-2026-96207 — Microsoft Partner Center — CVSS 10.0 — Microsoft Partner Center Certificate Validation Bypass Leads to Network Privilege Escalation