In this week’s Neeve issue, we’re spotlighting ransomware’s growing financial toll and the latest attack strategies. From a $17 billion hit to manufacturers to PRC-backed hackers exploiting VPN vulnerabilities, the stakes are higher than ever. We’re also unpacking a telecom advisory on the “Salt Typhoon” threat group and highlighting key updates on critical vulnerabilities and patches to keep you protected.

Coming up this week:

• 💵 Ransomware Costs Manufacturers $17 Billion

• ⚠️ PRC-Backed Hackers Exploit VPN Flaws

• ⭕️ Telecoms Warned of “Salt Typhoon” Risks

• 🗞️ Further Alerts & Insights

💵 Ransomware Costs Manufacturers $17 Billion

Manufacturing sector suffered over $17 billion in ransomware-related losses this year, according to new data.

• Attackers leveraged vulnerabilities in outdated systems and supply chain interdependencies.

• Downtime from operational disruptions accounted for most of the financial impact.

• Experts recommend network segmentation, OT-specific monitoring, and incident response drills.

🤔 The Bigger Picture:

Manufacturing's reliance on operational technology (OT) makes it highly vulnerable to cyberattacks. These disruptions can have cascading effects on supply chains and critical infrastructure. Organizations must integrate IT and OT security strategies and invest in resilience to protect against costly downtime.

⚠️ PRC-Backed Hackers Exploit VPN Flaws

U.S. and global agencies warn about PRC-backed hackers targeting Fortinet and Citrix VPNs.

• Threat actors exploit known vulnerabilities for data theft and prolonged access to networks.

• Organizations urged to patch VPN systems, use MFA, and monitor for unusual activity.

🤔 The Bigger Picture:

State-sponsored attacks continue to exploit well-documented weaknesses, emphasizing the need for proactive patch management. VPN vulnerabilities provide a direct gateway into corporate and government networks, risking data exfiltration and espionage. Immediate action on mitigations is essential to close these gaps.

⭕️ Telecoms Warned of “Salt Typhoon” Risks

CISA issues guidance on a suspected China-linked threat group, "Salt Typhoon," targeting telecom networks.

• The group exploits misconfigured servers and legacy software to compromise telecom infrastructure.

• Recommendations include securing APIs, removing exposed credentials, and reviewing server configurations.

🤔 The Bigger Picture:

Telecom providers are integral to global communication and critical infrastructure, making them high-value targets. “Salt Typhoon” highlights the increasing complexity of supply chain and infrastructure attacks. Providers must adopt zero-trust principles to harden their environments and limit attacker access.

Further Alerts & Insights