China-Backed Hackers Target SentinelOne in 'PurpleHaze' Attack Spree

SentinelOne's SentineLabs reported that China-linked actors (APT15 and UNC5174) conducted an eight-month campaign—tracked as PurpleHaze and ShadowPad—targeting cybersecurity vendors and about 70 organizations; tactics included Internet-accessible server reconnaissance, ShadowPad backdoor deployment, exploitation of Ivanti cloud vulnerabilities (CVE-2024-8963 and CVE-2024-8190) shortly before public disclosure, and compromise of a third‑party logistics provider, with SentinelOne urging transparency and coordinated incident response.