CISA join ASD to release advisory on PRC State-Sponsored Group, APT 40

CISA, in collaboration with ASD's ACSC, has released an advisory on the activities of a People's Republic of China (PRC) state-sponsored cyber group known as APT 40. This advisory, based on current investigations, highlights APT 40's ability to quickly adapt vulnerability proofs of concept for targeting organizations in various countries, including Australia and the United States. The group is adept at identifying new exploits within widely used public software to target vulnerable infrastructure. CISA, along with several international partners, urges organizations and software manufacturers to review the advisory to detect, prevent, and address APT 40 intrusions. Additionally, software vendors are encouraged to integrate Secure by Design principles into their practices to mitigate the impact of threat actor techniques and enhance the security of their products. For more information on PRC state-sponsored threat actor activity and secure design principles, interested parties can refer to CISA's resources on the subject.