CHINA-LINKED GROUP HOUKEN HIT FRENCH ORGANIZATIONS USING ZERO-DAYS

Summary from the TLDR InfoSec newsletter

A China-linked hacking group called Houken exploited three zero-day vulnerabilities in Ivanti Cloud Service Appliance devices to breach French government, telecom, media, finance, and transport organizations starting in September 2024, using sophisticated tools and rootkits to steal credentials and maintain persistent access.