Volt Typhoon routes zero-day attacks through rotating devices
The Hacker News reports that Chinese state-backed Volt Typhoon used its Silent Train network in zero-day attacks against high-value systems. The weekly roundup describes a relay built from rapidly rotating chains of compromised small-office/home-office, Internet of Things (IoT), and enterprise devices.
Instead of connecting directly from a fixed attacker server, the group passes traffic through hacked devices that may belong to unsuspecting organizations. It refreshes the chain and cleans it up after each operation, making the relay temporary and obscuring where the attack began.
If a critical-infrastructure or strategic-communications environment depends on third-party devices, their traffic could become a temporary relay for attacks aimed elsewhere. The roundup gives no indicators or victim details, so it does not establish which devices or networks are involved.
CVEs in this update
76 CVEs
Across Drupal core, Router, wasmtime, and related packages.