惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博客园 - 三生石上(FineUI控件)
Y
Y Combinator Blog
aimingoo的专栏
aimingoo的专栏
B
Blog
小众软件
小众软件
D
DataBreaches.Net
T
The Blog of Author Tim Ferriss
L
LangChain Blog
WordPress大学
WordPress大学
罗磊的独立博客
GbyAI
GbyAI
S
SegmentFault 最新的问题
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
T
Tailwind CSS Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
月光博客
月光博客
IT之家
IT之家
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
雷峰网
雷峰网
美团技术团队
F
Fortinet All Blogs
Hugging Face - Blog
Hugging Face - Blog
The GitHub Blog
The GitHub Blog

Security Affairs

Digital attacks drive a new wave of cargo theft, FBI says Carding service Jerry’s Store leak exposes 345,000 stolen payment cards Anthropic launches Claude Security to counter rapid AI-Powered exploits SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. Patch them now Copy Fail: New Linux bug enables Root via page‑cache corruption Agent’s claims on WhatsApp access spark security concerns Meta accused of violating DSA by failing to safeguard minors Large-scale Roblox hacking operation shut down by Ukrainian authorities CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure Internet censorship index reveals Russia’s lead and widespread content blocking All supported cPanel versions hit by critical auth bug, now patched U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog ShinyHunters exploit Anodot incident to target Vimeo CVE-2026-3854 GitHub flaw enables remote code execution Signal Phishing Campaign Targets German Officials in Suspected Russian Operation Microsoft fixes Entra ID flaw enabling privilege escalation New Android spyware Morpheus linked to Italian surveillance firm NCSC launches SilentGlass, a plug-in device to secure HDMI and DisplayPort links Medtronic discloses security incident after ShinyHunters claimed theft of 9M+ records Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software LINKEDIN BROWSERGATE Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting Fast16: Pre-Stuxnet malware that targeted precision engineering software Italy moves to extradite Chinese national to the U.S. over hacking charges U.S. utility giant Itron discloses a security breach Critical bug in CrowdStrike LogScale let attackers access files GopherWhisper: new China-linked APT targets Mongolia with Go-based malware SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 94 Trigona ransomware adopts custom tool to steal data and evade detection Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION
The alleged breach of China’s National Supercomputing Cen...
2026-04-09 · via Security Affairs

A hacker allegedly stole 10+ PB of sensitive military and aerospace data from China’s National Supercomputing Center, risking national security.

A massive alleged breach has hit China’s National Supercomputing Center (NSCC) in Tianjin. A hacker claims to have exfiltrated over 10 petabytes of highly sensitive data, including military, aerospace, and missile-related information. The facility supports around 6,000 clients, including scientific and defense organizations, raising serious concerns about national security and data exposure.

Cyber experts reviewing leaked samples say the attacker breached the system with relative ease and quietly exfiltrated massive volumes of data over several months without being detected. A group calling itself “FlamingChina” shared samples on Telegram, claiming the dataset includes sensitive research in aerospace, military, bioinformatics, and fusion.

The data is allegedly linked to major organizations such as Aviation Industry Corporation of China, Commercial Aircraft Corporation of China, and National University of Defense Technology. Chinese authorities have not yet commented.

CNN reported that cybersecurity experts say the group is selling limited samples of the stolen data for thousands of dollars, with full access costing hundreds of thousands, payable in cryptocurrency.

The alleged breach of the National Supercomputing Center in Tianjin could have major geopolitical consequences. Exposure of sensitive military and research data may give rival states valuable intelligence, increasing strategic pressure on China. The incident could escalate cyber tensions, fuel retaliation, and accelerate the global cyber arms race. It may also erode trust in Chinese infrastructure, impact international partnerships, and push governments to strengthen cybersecurity and control over critical technologies.

“Because the stolen data apparently includes military and aerospace research such as data from fighter jets and hypersonic missile testing, it could give China’s geopolitical rivals visibility of some of China’s most covert activity.” reported the CNN. “It may also cause questions to be asked about a policy which has seen vast resources channelled into China-owned and developed supercomputing specifically to reduce dependence on technology (mainly chips) manufactured in the West – a policy which would have seemed more important in light of Trump’s changeable policy of chip export controls.”

CNN could not independently verify the breach, but multiple experts who reviewed the leaked samples believe the data is likely genuine. The files reportedly include “secret”-marked documents, technical data, and simulations of weapons systems, consistent with the type of workloads handled by supercomputing centers.

The National Supercomputing Center in Tianjin is a major high-performance computing hub launched in 2009. It provides advanced processing power to universities, research institutes, and government agencies, supporting fields like aerospace, defense, AI, and weather forecasting. It hosts systems such as Tianhe-1A and enables large-scale simulations and data analysis.

According to the media, the attacker allegedly gained access via a compromised VPN and used a botnet to quietly extract data over six months, distributing traffic to avoid detection. Analysts say the method was effective but not especially sophisticated, highlighting systemic weaknesses. If confirmed, the incident would underscore longstanding cybersecurity gaps in China’s infrastructure, despite ongoing efforts to improve defenses.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)