Allied spy agencies blame 3 Chinese tech companies for Salt Typhoon attacks

Allied intelligence agencies publicly attributed extensive, China-linked cyber-espionage campaigns—tracked as Salt Typhoon and related clusters—to three Chinese technology firms accused of supplying cyber capabilities to PLA and MSS units; the advisory reports intrusions into telecommunications, lodging and transportation sectors across dozens of countries (over 80 affected), cites active exploitation of vulnerabilities including CVE-2024-21887 and CVE-2024-3400 (a Palo Alto VPN zero-day), and offers remediation guidance and guidance for contacting national cybersecurity authorities.