Chinese-speaking hackers used a compromised SonicWall VPN to access VMware ESXi systems, exploiting three zero-day vulnerabilities for potential ransomware attacks. Cybersecurity firm Huntress intervened before the attack could escalate, revealing a sophisticated toolkit that enables virtual machine escapes and backdoor access.

A Chinese advanced persistent threat (APT) group, identified as "Salt Typhoon," has successfully breached the U.S. Army National Guard's network, posing a significant security risk. The attack highlights vulnerabilities within military cyber defenses and raises concerns about the potential for espionage and data theft.