US and allied agencies tie China-based Integrity Tech to global intrusions as FBI seizes linked domains
Naming and disrupting a commercial contractor signals that allied governments now treat the private supply chain behind state-linked intrusions as a target. For defenders, the practical lesson is that unmonitored edge devices are a primary entry point. Boards should ask for a current inventory of firewalls, VPN concentrators and routers, together with their logging coverage and patch status, rather than relying on endpoint tooling alone.
What Happened
CISA, the FBI, NSA and international partners issued a joint advisory warning that China-based cybersecurity company Integrity Technology Group (Integrity Tech) is enabling threat actors to target critical infrastructure sectors worldwide. The actors use large-scale botnets, VPN infrastructure and living-off-the-land techniques, and they target poorly monitored edge devices to keep long-term, stealthy access. Victims include US government, manufacturing, healthcare and IT organisations, as well as organisations in Southeast Asia, Africa and North America. The FBI said it had seized seven domains linked to hacking tools allegedly operated by Integrity Tech, which were used to scan a South Carolina power company's network and other critical infrastructure systems.
Why It Matters
Naming and disrupting a commercial contractor signals that allied governments now treat the private supply chain behind state-linked intrusions as a target. For defenders, the practical lesson is that unmonitored edge devices are a primary entry point. Boards should ask for a current inventory of firewalls, VPN concentrators and routers, together with their logging coverage and patch status, rather than relying on endpoint tooling alone.
Sources
- Cybersecurity and Infrastructure Security Agency (opens in a new tab): CISA, FBI, NSA and International Partners Warn of China-based Cybersecurity Company Enabling Threat Actors to Target Multiple Critical Infrastructure Sectors Worldwide (2026-10-08)
- Cybersecurity and Infrastructure Security Agency (opens in a new tab): Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data (2026-10-08)
- The Register (opens in a new tab): US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide (2026-10-08)
More From This Briefing
- OpenAI brings GPT-6 Sol and Luna to all ChatGPT plans, rated High capability in cyber and bio
- Cisco discloses multiple critical 9.8-rated flaws in NX-OS, Nexus 3000/9000 switches and APIC
- Anthropic releases Claude Haiku 5.5, cutting small-model running costs by about 75% on average
- GlobalFoundries signs $2bn, five-year deal to make CoWoS silicon interposers for TSMC in New York
This story is part of the Laurenceo Intelligence briefing for 9 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.