Volt Typhoon used covert Silent Train relay network to exploit zero-days in management platforms, Lumen reports
THREAT ACTORCVE-2025-8876redteam/daily · 1 source
- Severity
- High
- Exploited
- Yes
- Sources
- 1
What happened
Researchers say a China-linked hacking group called Volt Typhoon built a hidden network of hacked routers and servers to disguise where its attacks came from. It used this network to break into software that organisations use to manage many computers and networks, including targets in US government, defence and critical services. The researchers found no sign that systems have been disrupted so far, but they think the group is preparing access for future use.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- CVE-2025-8876 is being exploited: treat it as urgent.
- CISA’s required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Check whether you use N-able N-Central: add it to your watchlist to hear when it is affected. Open your watchlist
Based on advisory data
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
Cyber Security News