Storm Watch | Cyber Podcast | Ivanti's Blast Radius Expands, CFIUS Hack, & Censeye Automates Threat Hunting
Summary: This episode of GreyNoise's Storm Watch podcast reports that a breach at the US Treasury's Committee on Foreign Investment (CFIUS) has been attributed to Chinese state-sponsored actors, potentially exposing sensitive data on national security reviews of foreign investments. It also notes that UK domain registry Nominet confirmed it was impacted by recent Ivanti VPN exploits, and that researchers found an information stealer disguised as a proof-of-concept exploit for the LDAPNightmare vulnerability (CVE-2024-49113).
Bottom line: Chinese state-sponsored actors reaching CFIUS data means the exposure touches national security reviews of foreign investments, and Nominet's confirmation shows the Ivanti VPN exploits are still widening their blast radius into critical infrastructure.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2024-49113
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026