Latest Intelligence

North Korean Kimsuky Group: Operation GitPower GitHub Staging Still Live Three Weeks After Disclosure

Inside China’s Exposed “Key Figures” Database for Ethnic External Propaganda

On October 24, 2026, the VULONE Team discovered an operational Chinese database titled 民族外宣重点人物信息库 (Key Figures Information Database for Ethnic External Propaganda). Linked to the China Internet Information Center (CIIC) and DeepChina, it held 2,580 records across 103 countries, structured as a 22-column CRM for tracking and countering voices on ethnic issues. The platform was left unencrypted on the public internet.

Inside a Commercial Account-Takeover Operation: Device-Trust Abuse Against Brazilian Retail Accounts

A commercial account-takeover service that forged “trusted device” records to sign into Brazilian retail accounts without ever triggering a second factor.

China-Linked Hackers Targeted Governments Across Asia. We Hacked Their Infrastructure.

A China-linked operator ran 66 AI-driven intrusions against government and industry targets across Asia from a single exposed server, reaching 48 systems before the whole operation leaked onto the open internet.