Volt Typhoon Targets Critical Infrastructure Entities

CISA and Arctic Wolf report that PRC-affiliated APT "Volt Typhoon" is actively infiltrating U.S. critical infrastructure sectors (Communications, Energy, Transportation, Water) via vulnerability exploitation, credential compromise, lateral movement, and Active Directory extraction to access OT systems; recommended mitigations include patching affected vendors, enabling phishing-resistant MFA, and user security training.