Volt Typhoon's Silent Train network tied to Cisco SD-WAN zero-day exploitation
ZERO-DAYBlack Lotus Labsredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
Lumen's Black Lotus Labs attributes a covert access network called Silent Train to the China-nexus group Volt Typhoon. It was first identified in late 2023 and was used for zero-day exploitation and strategic access, using rotating chains of compromised SOHO, IoT and enterprise devices. Cisco Talos linked malware that steals keys from Cisco SD-WAN to infrastructure overlapping with this network, which has since been disrupted.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Check the vendor’s advisory and install the fix as soon as it is available.
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
The Hacker NewsSecurityWeek
Who and what is in it
Threat actors
Companies