Lumen says Volt Typhoon banks Silent Train access in infrastructure
Lumen says the group rotates exploited SOHO, IoT and enterprise devices, including multiple zero-days, against high-value targets.
78
Product
Netgear Orbi
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenOct 28, 2026
- Last mentioned22h ago
Timeline
2 articles · newest firstVolt Typhoon uses Silent Train relays for zero-day edge attacks
Black Lotus Labs says four confirmed zero-days hit VeloCloud, Cisco SD-WAN, N-central, and Versa Director.
86
Related CVEs
by mentions- CVE-2026-2012789%10.0Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
- CVE-2026-168122%10.0OS Command Injection in Arista VeloCloud Orchestrator On-Prem
- CVE-2025-88764%9.4OS Command Injection in N-able N-central Before 2025.3.1
- CVE-2025-88753%9.4Insecure Deserialization Code Execution in N-able N-central (KEV)
- CVE-2024-397174%7.2Unrestricted File Upload in Versa Networks Versa Director Exploited by Volt Typhoon
Appears with
- Black Lotus Labsorganization · 2
- Intelbrasvendor · 2
- Lumenorganization · 2
- Netgearvendor · 2
- Volt Typhoonthreat actor · 2
- N-ablevendor · 1
- KV-Botnetmalware · 1
- N-able N-centralproduct · 1
- VeloCloud Orchestratorproduct · 1
- Intelbras modemsproduct · 1
- NCSCorganization · 1
- Versavendor · 1
- FBIorganization · 1
- Quest KACEproduct · 1
- Versa Directorproduct · 1
- Cisco Catalyst SD-WANproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.