Secure by Design Alert: Malicious Cyber Actors Exploiting Insecure SOHO Routers

TLP:CLEAR

Malicious Cyber Actors Exploiting Insecure SOHO Routers

Threat actors—particularly the People’s Republic of China (PRC)—sponsored Volt Typhoon group—are compromising small office/home office (SOHO) routers by exploiting software defects that manufacturers must eliminate through secure software design and development. Specifically, Volt Typhoon actors are exploiting security defects in SOHO routers to use them as launching pads to further compromise U.S. critical infrastructure entities. CISA and the Federal Bureau of Investigation (FBI) are releasing this Alert based upon recent and ongoing threat activity to urge SOHO router manufacturers to build security into technology products from the beginning and encourage all customers of SOHO

routers to demand better security by design.

Please click here to read more detail

TLP:CLEAR