China-linked threat actors, including groups designated Volt Typhoon and Salt Typhoon, are systematically compromising SOHO routers and IoT devices worldwide to build covert proxy networks used for espionage and offensive cyber operations. Any organization whose internet traffic passes through residential or small-business network infrastructure may unknowingly provide cover for these actors, and any network reachable via edge devices is a potential target. The primary business risk is undetected, persistent adversary access to sensitive networks, with secondary risk of being misidentified as an attack source.