Chinese state hackers (Salt/Volt Typhoon)

Assessment

APT31 first deployed the BlueMoon exploit kit, chaining Microsoft Windows and Google Chrome vulnerabilities, on Aug 28, and several other suspected China-nexus espionage clusters adopted it within days. Salt Typhoon's long-running telecom and critical-infrastructure compromise, active since at least 2021 and spanning hundreds of organisations in more than 80 countries, remained unresolved through Sept 15 with no new public advisory.