Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-speaking threat actor exploited vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and over 18,500 records in backend databases. The campaign targeted government networks, exfiltrating credentials and personal information. Organizations using affected systems are urged to patch immediately and audit for unauthorized access.