• Security researchers from recorded future observe new salt typhoon activity
• The threat actor is still going after ISPs and universities in the West
• The group abuser is missing in Cisco Gear to hit new targets

Salt Typhoon, a Chinese state -sponsored threat actor, best known for recently violating almost a dozen telecom providers in the United States, has struck again and hit not only US organizations but also those from Britain, South Africa and other places around the world.

The latest intrusions were discovered by cybersecurity scientists from the recorded future who said the group is targeting internet-exposed web boundaries in Ciscos iOS software that drives various routers and switches. These devices have known vulnerabilities that threat actors actively exploit in order to gain initial access, root privileges and more.