Chinese Hackers Exploit Zero-Day Flaw to Breach US and Indian Internet Firms

State-sponsored group Volt Typhoon linked to sophisticated attacks on Versa Director software, compromising critical infrastructure.

Hackers exploited a zero-day vulnerability in Versa Director software, used by ISPs and MSPs.
Four US firms and one Indian company were breached, including internet service providers.
The malware, dubbed VersaMem, steals credentials and operates undetected in the system's memory.
China denies state sponsorship, attributing the attacks to cybercriminal group 'Dark Power'.
Security agencies urge immediate software updates and enhanced cybersecurity measures.