Tag: CVE-2023-20198

2 Attack Reports | 0 Vulnerabilities

Attack reports

Inside Salt Typhoon: China's State-Corporate Advanced Persistent Threat

Salt Typhoon is a Chinese state-sponsored cyber threat group aligned with the Ministry of State Security, specializing in long-term espionage operations targeting global telecommunications infrastructure. Active since 2019, it has demonstrated advanced capabilities in exploiting network edge device…
CVE-2024-3400
china
cyber espionage
telecommunications
china chopper
advanced persistent threat
demodex
CVE-2023-20198
2025-09-25
long-term persistence
infrastructure targeting
ministry of state security
sigrouter
CVE-2023-35082
contractor ecosystem
Published: September 25, 2025
Downloadable IOCs: 0

The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices

Salt Typhoon, a Chinese state-sponsored threat actor, has been targeting major telecommunications providers worldwide by exploiting vulnerabilities in network devices. This analysis tracks global exposures of internet-facing devices associated with Salt Typhoon activity over six months, including S…
network devices
CVE-2024-21887
CVE-2023-46805
shadowpad
telecommunications
vulnerability exploitation
CVE-2023-48788
CVE-2022-3236
masol rat
ivanti connect secure
2025-04-26
chinese state-sponsored
CVE-2023-20198
sophos firewall
CVE-2023-20273
cisco ios xe
exposure tracking
fortinet forticlient ems
Published: April 26, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports