Executive Summary: Defending against China-nexus covert networks of compromised devices Organisations should map and baseline their edge device traffic, especially VPN and remote access connections, and adopt dynamic threat feed filtering that includes known covert network indicators.