Salt Typhoon: Defending Against State-Sponsored Cyber Threats with Aviatrix

Salt Typhoon is a suspected Chinese state-sponsored APT group that has already compromised over 100,000 routers and established persistent footholds inside telecommunications providers, financial institutions, healthcare organizations, and more. The attack method is straightforward: exploit known vulnerabilities in VPNs, firewalls, and routers from Cisco, Juniper, Fortinet, and Ivanti, then move laterally through flat networks that have no meaningful way to stop them. This threat overview explains how the attack works and what Aviatrix does to close each gap it exploits.