Threat Intelligence Research: Volt Typhoon Compromises 30% of Cisco RV320/325 Devices in 37 Days

SecurityScorecard STRIKE reports that Volt Typhoon (a China‑linked state‑sponsored threat actor) is leveraging compromised SOHO/network‑edge devices—primarily Cisco RV320/325 routers—to build covert infrastructure for data transfer and possible access to target networks; researchers observed communication between many Cisco devices and known Volt Typhoon IoCs across multiple regions, highlighted the risk posed by end‑of‑life devices, and recommended identifying vulnerable devices, upgrading unsupported hardware, and continuous monitoring.