Timeline

UAT-8616

A threat actor active since at least 2023 that exploits Cisco SD-WAN vulnerabilities using Operational Relay Box infrastructure that overlaps with Flax Typhoon and Integrity Technology Group networks.

3 of 3 entries (3 events, 0 interactions)

Filters

EventsMentionsInteractions

#9 29 Jun

Mentioned in: Cisco tops a five-vendor KEV batch

Cybersecurity: Threats and Defences

#8 23 Jun

Mentioned in: Triple CVSS-10 Ubiquiti chain hits root

Cybersecurity: Threats and Defences

#4 14 May

Exploited CVE-2026-20182, injected SSH keys, manipulated NETCONF configuration, created accounts, and cleared logs

Cybersecurity: Threats and Defences: UAT-8616 keeps Cisco SD-WAN under fire

← Back to UAT-8616