PRC State-Sponsored Threat Actors (Volt Typhoon) Target Critical Infrastructure Entities

CISA and Arctic Wolf report that the PRC‑affiliated threat actor Volt Typhoon has been observed conducting targeted intrusions against IT networks of U.S. critical infrastructure (Communications, Energy, Transportation, Water/Wastewater), using reconnaissance, exploit of known/zero‑day vulnerabilities, privilege escalation, lateral movement to achieve domain compromise and access OT assets; the advisory warns of potential cyber attacks in a crisis and provides mitigations including patching vulnerable devices, enabling phishing‑resistant MFA, and security awareness training.