The National Cyber Security Centre, part of GCHQ, and six international partners have issued a joint advisory naming Integrity Technology Group, a China based company, as enabling China linked cyber actors to exploit and compromise networks worldwide. The advisory was co sealed with agencies from Australia, Canada, Japan, New Zealand, Spain and the United States.
The advisory says the company and affiliated actors used AI tools such as automated scanning, large scale botnets and manual exploitation techniques to steal confidential data from organisations across many sectors. The activity is reported to be consistent with campaigns publicly known as Flax Typhoon, Ethereal Panda and Red Juliett among others.
The NCSC notes the UK government sanctioned Integrity Tech last year alongside another China based information security company. It also recalls that in September 2024 the NCSC exposed the company as the operator of a 'substantial botnet' that was used by the group Flax Typhoon.
Organisations are urged to follow the NCSC mitigation guidance and to use safeguards, sandboxing and active oversight when deploying autonomous systems. The advisory also highlights a campaign affecting Fortinet firewalls and VPN gateways and urges affected customers to take action. The full advisory and technical details are available on the FBI website.
What it means for your business
Check the NCSC advisory and the FBI link for the technical mitigations it sets out and apply any vendor patches or configuration changes, especially for Fortinet firewalls and VPN gateways. Review remote access controls, network segmentation and monitoring for unusual scanning or botnet activity, and consider a penetration test or external cyber help if you cannot apply the guidance in house.
This brief was written automatically from the source above and summarises it. It is not legal, tax or financial advice.