Chinese APT leveraged zero days — including Log4j — to compromise US state governments

A hacking group tied to the Chinese Ministry of State Security leveraged a number of zero-day vulnerabilities, such as Log4j and a previously undiscovered flaw in USAHerds, a commercial-off-the-shelf application used for tracing animal diseases, to gain initial access.

application security apt chinese compromise cyberespionage log4j state us