Chinese Hackers Exploited Ivanti Flaw in France

Hackers Targeted French Government Entities, ANSSI Said Akshaya Asokan (asokan_akshaya) • July 2, 2025

A hacking campaign linked to Chinese threat actors chained zero-days in Ivanti server software to target French government, defense and media entities, the national cyber agency said.

See Also: Beyond Replication & Versioning: Securing S3 Data in the Face of Advanced Ransomware Attacks

The French National Agency for Information Systems Security, or ANSSI, said Tuesday it observed French organizations affected by activity using a slew of security flaws to break into an end-of-life version of the Utah company's Cloud Services Appliance applications. The campaign affected government agencies, telecoms and firms in the media, finance and transport sectors. ANSII dubs the intrusion set "Houken" (see: Ivanti CSA Customers Targeted in New Zero-Day Attacks).

The hacker used a wide number ...