Threat Update: Critical Infrastructure Vulnerability

**Executive Summary:** This report alerts that the China-based state-sponsored APT 'Volt Typhoon' has been actively exploiting Fortinet/FortiGuard vulnerabilities and unpatched SOHO devices to infiltrate U.S. critical infrastructure sectors, emphasizes their use of living-off-the-land techniques to evade detection, and provides victimology, recommended mitigations (patching, MFA, device segmentation, EDR in prevent mode), and guidance to engage law enforcement.