Threat actorcritical

Salt Typhoon Exploits Flaws in Edge Network Devices to Breach 600 Organizations Worldwide

The Hacker Newsby @TheHackersNewsSep 5, 2025 · 12:40 UTC (Sep 5, 2025)5 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-0171 CVE-2023-20198 CVE-2023-20273 CVE-2023-46805 CVE-2024-21887 CVE-2024-3400

Tags: cve-2018-0171 cve-2023-20198 cve-2023-20273 cve-2023-46805 cve-2024-21887 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-0171	Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install	9.8	99%	KEV	Mar 28, 2018 KEV Nov 3, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2024-3400	Unauthenticated Root Command Injection in Palo Alto Networks PAN-OS GlobalProtect	10.0	100%	KEVRansomwarePoC ×2	Apr 12, 2024 KEV Apr 12, 2024

From the original article

5 min read at thehackernews.com

The China-linked advanced persistent threat (APT) actor known as Salt Typhoon has continued its attacks targeting networks across the world, including organizations in the telecommunications, government, transportation, lodging, and military infrastructure sectors.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.