Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI Startup Funding
Return To Office
Management Delayering
Agentic AI Security
Open Source Contribution Governance
Tech Layoffs
Vendor-run benchmarks
Agentic AI Risk
BGP hijacking
Software Update Supply Chain Abuse

How this is made

Today For You My Stack Off Radar Search

Topic

C2 channel hijacking

Taking over an implant's cleartext, unauthenticated command-and-control path so that control passes to whoever occupies the channel rather than whoever planted the code.

Current clusters

build1 distinct publisher

A root implant in ZBT router firmware takes orders from whoever holds the C2 position

VulnCheck says SPEAKINGSTONE beacons as root over cleartext UDP with no authentication. Control passes to anyone who occupies that channel, and a second implant in the same firmware image turned up in 22 countries.

Publishers:docs.vulncheck.com

Reality

Evidence58
Adoption40
Hype gap+12
Incentives76

Confidence55

C2 channel hijacking — Clarity Today