Network edge malware

Cyclops Blink resurfaces on Cisco firewall managers as portable x86-64 Linux malware

Sophos found the timezone_check implant on compromised Cisco Firewall Management Center devices in August 2026 and assessed it likely Sandworm's work. Generic SysV persistence replaces the firmware trick and widens the appliances it can run on.