Hong Kong SFC mandates stronger login security for crypto platforms
The SFC has mandated that all virtual asset trading platforms and internet brokers must replace one-time password (OTP) logins, including those sent via SMS and email, with phishing-resistant authentication methods within 12 months.
FCC bans US IT firm Digitalsystem alleged China links
Digitalsystem Technology, headquartered in Los Angeles, was added to the FCC's Covered List for its partnerships with Hong Kong operators China Mobile and China Unicom, and Beijing-based China Unicom.
New GoodPersonRAT malware distributed via fake LetsVPN installer
The trojanized installer, identified as Kuailian_win-setup.86.msi, embeds a loader and an encrypted payload alongside the authentic LetsVPN application.
The researcher known as "Nightmare-Eclipse" published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.