Follow the latest coverage, related explainers and connected technology stories.
Sygnia identified a new technique used by the Fire Ant group that relies on compromising Cisco IOS XR routers, authentication servers, and Linux management servers, then using the routers to capture network traffic and create hidden access channels. Researchers also discovered a new backdoor called BridgeAgent, along with indicators and YARA rules to assist with detection.
Cloudflare analysis showed that 67 networks were adding the Only to Customer attribute, while an independent experiment found that 33.1% of IPv4 paths and 17% of IPv6 paths lost the attribute in transit. The company identified Tier 1 networks GTT and Arelion among the prominent networks that removed OTC, with Arelion later beginning to preserve it according to Cloudflare’s findings.