Security2 hOctober 21, 2026, 19:05

Sophos details China-aligned Bronze Sandcastle threat cluster

Sophos has disclosed a previously undocumented China-aligned threat cluster called Bronze Sandcastle. Since mid-2025 it has targeted organizations in Asia and Africa, using Sandboxie DLL sideloading to deploy backdoors.

The Hacker News

Open source

Sophos details China-aligned Bronze Sandcastle threat cluster

Cluster active since mid-2025
Targets organizations in Asia and Africa
Signature technique is Sandboxie DLL sideloading
Research published by Sophos researcher Gabor Szappanos

#Sophos#Sandboxie

Cisco Talos: Two FMC Flaws Exploited by Three Threat Clusters

Security

Google threat intelligence group details how one of its researchers infiltrated hacker group TeamPCP and helped disrupt its software supply chain hacking spree (Andy Greenberg/Wired)

SenseTime SenseCore details Prefill/Decode split clusters for agentic inference

Software

Sophos details China-aligned Bronze Sandcastle threat cluster

Cisco Talos: Two FMC Flaws Exploited by Three Threat Clusters

Google threat intelligence group details how one of its researchers infiltrated hacker group TeamPCP and helped disrupt its software supply chain hacking spree (Andy Greenberg/Wired)

SenseTime SenseCore details Prefill/Decode split clusters for agentic inference

Valkey Team Details Async I/O, Cluster Upgrades and Plans Beyond Caching