US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

Thursday, October 8, 2026 at 12:46 PM UTC·Source: SecurityWeek

Updated: Thursday, October 8, 2026 at 01:01 PM UTC

Executive Summary

Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026. The post US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward appeared first on SecurityWeek .

Analysis

Source Attribution

Originally published by SecurityWeek on Oct 8, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9869 — A stack-based buffer overflow vulnerability exists in the boa formTR069Config fu...

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9869

1h agoNIST NVD

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9827 — A arbitrary file write vulnerability exists in the boa formUploadFile functional...

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9827

1h agoNIST NVD

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9817 — A stack-based buffer overflow vulnerability exists in the boa formUploadFile fun...

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9817

1h agoNIST NVD