<story><title>New 0-Day Attacks Linked to China&apos;s &apos;Volt Typhoon&apos;</title><url>https://krebsonsecurity.com/2024/08/new-0-day-attacks-linked-to-chinas-volt-typhoon/</url></story><parent_chain></parent_chain><comment><author>Lonestar1440</author><text>&amp;quot;The advisory placed much of the blame on Versa customers who “failed to implement system hardening and firewall guidelines…leaving a management port exposed on the internet that provided the threat actors with initial access.”&amp;quot;&lt;p&gt;If ISPs are leaving management ports open on the Internet, it&amp;#x27;s going to take more than a vendor patch to protect them from cyber warfare.</text></comment>
<story><title>New 0-Day Attacks Linked to China&apos;s &apos;Volt Typhoon&apos;</title><url>https://krebsonsecurity.com/2024/08/new-0-day-attacks-linked-to-chinas-volt-typhoon/</url></story><parent_chain></parent_chain><comment><author>blahgeek</author><text>(I&amp;#x27;m a Chinese and a software engineer, so it&amp;#x27;s my obviously-biased 2 cents)&lt;p&gt;Based on my observation of fellow Chinese software engineers&amp;#x27; average knowledge and skills about cyber security, as well as the absolute absent of security considerations of most &amp;quot;SOHO network devices&amp;quot; in China, I would rather apply Hanlon&amp;#x27;s razor and say that it&amp;#x27;s not the Chinese attackers, but it&amp;#x27;s Chinese botnet.&lt;p&gt;As you may already know, Chinese users and software engineers generally does not care about personal privacy and hence also cyber security, so the entire industry is rather undeveloped.</text></comment>