Chinese government hackers targeted US internet providers with zero-day exploit, researchers say

Executive summary: Security researchers at Black Lotus Labs found that the China-linked APT group Volt Typhoon actively exploited a previously unknown zero-day in Versa Director to compromise ISPs, MSPs and other networking providers, using the platform as a pivot to access downstream customer networks; Versa issued emergency and comprehensive patches and CISA added the flaw to its known-exploited vulnerabilities list.