CISA: Vendors must secure SOHO routers against Volt Typhoon attacks

CISA and the FBI have issued guidance urging SOHO router manufacturers to harden device security against ongoing exploitation—particularly activity attributed to Chinese state-backed group Volt Typhoon—after KV‑botnet operations hijacked routers, VPNs, and firewalls to proxy malicious traffic and target U.S. critical infrastructure; the alert recommends secure web management interfaces, automated updates, local-only WMI access, CVE/CWE disclosure, and incentives for secure product design.