CISA, NSA, Others Outline Security Steps Against Volt Typhoon

U.S. and Five Eyes cybersecurity agencies warn that the PRC‑linked APT Volt Typhoon has compromised IT networks across communications, energy, transportation, and water sectors—using a KV Botnet of infected home/SMB routers and living‑off‑the‑land techniques—to pre‑position for lateral movement into OT and potential disruptive operations; agencies outline detection, hardening, governance, and supply‑chain recommendations to mitigate the urgent risk.