Salt Typhoon Strikes Again: Cisco Devices Under Siege Worldwide
Salt Typhoon, a Chinese APT, is back with a vengeance, targeting over a thousand Cisco devices in telecoms, ISPs, and universities worldwide. Despite past warnings, Salt Typhoon leveraged old vulnerabilities to infiltrate networks across six continents. It’s a cyber-caper that makes even the most hardened IT pros break into a sweat.

Hot Take:
Well, it looks like Salt Typhoon is back at it again, reminding us all that sometimes the most persistent pests are the ones with the saltshaker. Cisco devices, you’ve just become the new ‘it’ gadget for cybercriminals. Forget the latest iPhone; hackers want a piece of your router pie. Who knew that a ’10 out of 10′ vulnerability score would look less like a perfect gymnastics routine and more like a horror movie rating? Time to batten down the hatches, Cisco, or at least update your firmware!
Key Points:
- Salt Typhoon, a Chinese APT, is targeting Cisco devices in telecoms, ISPs, and universities.
- This group leverages vulnerabilities in Cisco’s IOS XE operating system.
- The vulnerabilities CVE-2023-20198 and CVE-2023-20273 are being exploited.
- Salt Typhoon’s campaign impacts organizations across six continents.
- More than half of the affected devices are located in South America, India, and the US.