Velvet Ant Exploits CVE-2024-20399 Zero-Day Cisco Switch Flaw; CISA Adds Dahua IP Cameras and Linux Kernel Vulnerabilities

A China-linked threat group known as Velvet Ant has exploited a zero-day vulnerability (CVE-2024-20399) in Cisco Nexus switches to gain unauthorized control and evade detection. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability, along with security flaws in Dahua IP cameras and Linux Kernel, to its Known Exploited Vulnerabilities catalog. The exploitation of these vulnerabilities highlights ongoing cybersecurity threats posed by Chinese threat actors, particularly in relation to critical infrastructure and technology systems.