US, UK and partners name China's Integrity Tech for enabling hacks of critical infrastructure edge devices

CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide ^[1]. The activity is consistent with Flax Typhoon and targets poorly monitored edge devices for long-term access, and the UK NCSC says the actors combine AI-driven scanning, large botnets and manual exploitation to steal confidential data ^[1][2]. The agencies strongly urge organizations, especially critical infrastructure, to review the advisory, hunt for signs of compromise and implement mitigations including patching the listed exploited CVEs ^[1].

Industries mainly affected: Healthcare, Manufacturing, Government, Education

1. Review the joint advisory and hunt for signs of compromise ^[1].
2. Patch the listed known exploited CVEs and harden edge devices .