security1 publisher
Cyclops Blink resurfaces on Cisco firewall managers as portable x86-64 Linux malware
Sophos found the timezone_check implant on compromised Cisco Firewall Management Center devices in August 2026 and assessed it likely Sandworm's work. Generic SysV persistence replaces the firmware trick and widens the appliances it can run on.
Publishers:nakedsecurity.sophos.com
Reality
- Evidence63
- Adoption38
- Hype gap+12
- Incentives55
- Confidence58