-
President Donald Trump said on Friday that he and Chinese President Xi Jinping discussed cyberattacks and espionage activities carried out by both nations during their bilateral meeting this week.
Speaking to reporters aboard Air Force One during his return flight to the United States, Trump, when asked if he raised the topics in their discussions, said, “I did. And he talked about attacks that we did in China. Y’know, what they do, we do too.”
“They’re talking about the spying. Well, we do it too,” he said. “We spy like hell on them too.”
“I told him, ‘We do a lot of stuff to you that you don’t know about and you’re doing things to us that we probably do know about,’” Trump added.
The president didn’t describe specific cyber campaigns that were discussed. China has made waves in recent years for its sweeping intrusions into telecommunications systems, government agencies and other infrastructure in the U.S. and around the world.
U.S. officials say the Volt Typhoon group has burrowed into critical infrastructure systems, such as power grids and water treatment plants, to be able to disrupt or sabotage them if China invades Taiwan.
Asked about these intrusions, Trump said, “Well, you don’t know that. I mean, I’d like to see it, but it’s very possible that they do.”
The remarks offer a rare public acknowledgment of U.S. clandestine efforts to monitor Chinese officials and networks. Intelligence agencies such as the NSA and CIA use covert tools, capabilities, and secret partnerships to track foreign adversaries.
CIA officials have said they have used video campaigns to recruit Chinese officials as intelligence assets.
Trump’s remarks also reveal a notable diplomatic posture on the issue, particularly given how difficult cyber operations can be to publicly attribute or verify.
Chinese officials routinely deny allegations of hacking and espionage, though Trump’s description of his conversation with Xi appeared to suggest some acknowledgment from Beijing that it has sought to infiltrate U.S. computer networks and recruit American assets of its own.
The White House and the Chinese embassy in Washington did not immediately respond to a request for comment.
Suspected Chinese spies sought out a former senior State Department officer late last year, requesting they draft an assessment of U.S. policy priorities in Venezuela in exchange for payment, Nextgov/FCW reported in January. Such recruitment efforts have resurfaced amid a wave of departures from the federal government over the last year, as the administration has pursued various measures to shrink the federal workforce.
In Trump’s second term, U.S. officials have been seeking a more hardened approach against foreign hackers and cybercriminal groups. In doing so, they have created a budding market for offensive cyber capabilities that government and industry are still grappling with. Offensive cyber operations would be among the tools the administration plans to use against groups deemed threats to the United States, according to a counterterrorism strategy released earlier this month.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence. The vulnerabilities, collectively dubbed Claw Chain by Cyera, can permit an attacker to establish a foothold, expose sensitive data, and plant backdoors. A brief description of the flaws is below –
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Gunra ransomware is rapidly evolving into a more structured and dangerous cybercrime operation after shifting from a Conti-based locker to its own Ransomware-as-a-Service (RaaS) model. First discovered in April 2025, the group initially targeted a small number of victims, but its recent operational changes have significantly increased its reach and impact across industries. Gunra first […]
The post Gunra Ransomware Expands RaaS After Conti Locker Shift appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed vulnerability in VMware Fusion has raised serious security concerns after researchers confirmed it could allow attackers to escalate privileges to root on affected systems. The flaw, tracked as CVE-2026-41702, has been rated high severity with a CVSS score of 7.8, highlighting its potential impact in real-world environments. VMware Fusion Flaw Broadcom, which […]
The post VMware Fusion Flaw Could Allow Attackers to Gain Root Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – May. 15, 2026–Read the full story in SC Media
According to the 2026 CISO Report from Cybersecurity Ventures, sponsored by Sophos, there are now about 35,000 full-time CISOs worldwide. Most of them are employed by larger enterprises.
Small to mid-sized businesses (SMBs) typically can’t justify the salary, staffing, and operational support required for a full-time executive-level security leader. But there are alternatives that enable SMBs to rent a CISO.
A virtual CISO typically operates remotely to serve multiple customers, offering broad expertise and scalability. This model gives clients access to seasoned professionals who understand compliance frameworks, governance, and incident.
However, vCISOs may lack deep familiarity with an organization’s culture, workflows, and business priorities. And because they support multiple clients simultaneously, incident-response times during emergencies may vary.
Fractional CISOs also serve multiple customers but attempt to solve some of these limitations by embedding more deeply into each client organization on a part-time basis. A fractional CISO may attend leadership meetings, develop closer operational relationships, and align security decisions more directly with business strategy.
But fractional models also have tradeoffs. Availability can still be limited, especially when a widespread incident hits multiple clients at once. In practice, many SMBs that employ virtual or fractional CISOs find themselves balancing cost, continuity, and strategic depth.
A recent SC Media article dives into a promising new category for SMBs: AI-assisted security leadership services which aims to combine AI-driven analytics, continuous control validation, threat intelligence, and human oversight delivered through managed security providers (MSPs) and managed security service providers (MSSPs).
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
The post AI-Assisted Cybersecurity Leadership Services For Small And Mid-Sized Businesses (SMBs) appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Shai-Hulud is a major cybersecurity threat targeting the open-source software supply chain. Security researchers are raising alarms over “Shai-Hulud,” a self-propagating npm worm designed to steal sensitive developer credentials from GitHub, AWS, Kubernetes, and local environments. The campaign, tracked by SlowMist’s MistEye threat intelligence platform, is already being described as one of the largest npm […]
The post Shai-Hulud Worm Steals Dev Secrets Across npm, GitHub, AWS & Kubernetes appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A powerful zero-click exploit chain for the Pixel 10 that can take an attacker from a remote Dolby decoding bug to full kernel control through a single vulnerable video processing driver. The work shows both how quickly Google can now patch critical issues and how shallow mistakes in vendor drivers can still undermine Android’s security […]
The post Google Project Zero Details Pixel 10 Zero-Click Exploit Chain appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are rapidly weaponizing a little-known Microsoft authentication feature to hijack enterprise accounts, as device code phishing surges across the threat landscape. The spike in activity is closely tied to the public release of criminal toolkits and phishing-as-a-service (PhaaS) platforms, making the once obscure technique widely accessible. New kits are appearing almost weekly, many seemingly […]
The post Hackers Exploit OAuth Device Flow to Steal Microsoft 365 Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A high-severity vulnerability in PraisonAI is drawing urgent attention after security researchers observed exploitation attempts within hours of public disclosure. The flaw, tracked as CVE-2026-44338 and documented in the GitHub advisory GHSA-6rmh-7xcm-cpxj, exposes a critical authentication bypass in the platform’s legacy API server, potentially allowing attackers to execute AI workflows without credentials. PraisonAI Vulnerability The […]
The post PraisonAI Vulnerability Actively Exploited Within Hours of Being Made Public appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


