Knownsec: The King of Vulnerability Missed Three Vulnerabilities of Its Own

The leak incident involving Chinese cybersecurity firm Knownsec shows the company’s seemingly transparent crisis management strategy and underscores its position in the industry, but mysteries remain.

On November 5, 2025, a Chinese-language blog called Mrxn’s Blog published a “massive” leak of information from Knownsec (知道创宇), a Chinese cybersecurity company. Mrxn claimed that the leak included 12,000 confidential documents, such as “China’s state-level cyber weapons, internal tool systems, and global target lists.” The blog provided sample screenshots of the leak and noted that the leaked information first appeared on the code-sharing platform GitHub, which subsequently removed it “for violating its terms of service.” The NETASKARI Substack was among the first outlets to report in English on Mrxn’s blog post about the leak. NETASKARI’s author, a freelance journalist based in Amsterdam, The Netherlands, provided a summary and analysis of the limited available leaked documents—including screenshots of product brochures, data collection lists, and a Knownsec company profile—and concluded there was no “smoking gun” or evidence of state-of-the-art tools used by Chinese state hackers. H…