China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage high-value networks.

Sygnia, the incident response firm that investigated the intrusion, said the actor

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three

Mathematics in the age of AI

Mathematics in the age of AI Source: Hacker News