China-linked Fire Ant Hides Inside Trusted Infrastructure https:// securityaffairs.com/198183/apt /china-linked-fire-ant-hides-inside-trusted-infrastructure.html # securityaffairs # hacking
mastodon:infosec-exchange 29d ago
Fire Ant Evolves: From Hypervisors to Trusted Infrastructure Fire Ant, first reported in 2025, remained active in 2026 and expanded its operations beyond hypervisors into the trusted infrastructure that routes traffic, authenticates administrators, manages access, and records activity. The main finding is that the actor was no longer targeting only individual systems, it was targeting the infrastructure layer that controls how entire environments connect and operate both within and across organi
By September 2, 2026, researchers at Sygnia reported that the China-nexus actor Fire Ant expanded its long-running espionage campaign from VMware environments to target Cisco IOS XR routers and TACACS authentication servers, rewriting logs to remain undetected.
Windows XP cumple 25 años https:// blog.elhacker.net/2026/08/wind ows-xp-cumple-25-anos.html
McKesson Confirms Data Breach as Attacker Deadline Looms https:// packetstorm.news/news/view/429 89 # news
State agriculture ministers meeting in Canberra on September 22, 2026, called on the federal government to maintain funding for fire ant eradication efforts, arguing the program remains "technically feasible, cost beneficial and in the national interest."
Researchers discovered that the Chinese Fire Ant hacking group has deployed a new tactic using invisible GRE tunnel interfaces on Cisco IOS XR routers to conduct espionage. The tunnels remain undetectable in running configurations and commit histories, reported between 31 August and 1 September 2026.
¡No te rindas!
https://www.