Suspected China-linked hackers root 25 firewalls and breach a US government network
A custom exploit and a kernel vulnerability gave the attacker root access to servers in the US, Japan, Taiwan and South Korea. Twenty-two of the compromised firewalls still have active web shells, and a tunnel into the US government organisation is likely still running.