Microsoft: Some Windows PCs fail to shut down after January update

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

January 16, 2026

A threat actor likely aligned with China has been observed targeting critical infrastructure sectors in North America since at least last year.Cisco Talos, which is tracking the activity under the name UAT-8837, assessed it to be a China-nexus advanced persistent threat (APT) actor with medium confidence based on tactical overlaps with other campaigns mounted by threat actors from the region.

Microsoft: Some Windows PCs fail to shut down after January update

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

Cisco finally fixes AsyncOS zero-day exploited since November