Aggregator

Two-time U.S. Open champion Naomi Osaka had a rough second set, but closed strong to claim a 6-2, 5-7, 6-1 victory Thursday at Arthur Ashe Stadium.

If Bill Belichick was hoping to have a controversy-free second season at the helm of North Carolina’s football program, he'd better think again. 

A Latino running group has been run out of a historically black Los Angeles neighborhood after opponents told organizers to find somewhere else to pound the pavement. Barrio Athletics announced that its Sunday 5K moved from Leimert Park in Crenshaw to Elysian Park near Dodger Stadium following “careful conversation with community leaders.” Barrio Athletics announced...

China-Linked Hackers Hid In Cisco Routers, Stole Administrator Credentials: Report

Authored by Arthur Zhang via The Epoch Times,

A China-linked cyberespionage group compromised Cisco routers and hid its activity from the network administrators who managed them, cybersecurity firm Sygnia said in an Aug. 27 report.

The Cisco logo is displayed in front of Cisco headquarters in San Jose, Calif., on Feb. 9, 2024. Justin Sullivan/Getty Images

The group also recorded traffic moving through the devices and used them to probe other high-value networks, according to the report.

The hackers compromised systems that verify whether network administrators are authorized to log in to routers and other equipment, allowing them to capture administrator credentials, Sygnia said.

Sygnia tracks the group as Fire Ant and describes it as China-nexus. The firm has not publicly tied the hackers to a specific Chinese government agency, nor have they disclosed the affected organizations or countries, and no U.S. victim has been publicly identified.

Cisco on Sept. 2 separately issued a critical security-hardening update for IOS XR, the router operating system involved in Sygnia's investigation. Cisco said the update addresses seven groups of vulnerabilities discovered through internal testing and not known to be actively exploited.

Cisco's advisory does not mention Fire Ant or Sygnia's investigation, and Sygnia did not identify a Cisco vulnerability used in the attacks.

Hackers Hid Activity on Routers

Sygnia began investigating after researchers found a hidden network tunnel operating through a Cisco router but absent from the device's normal configuration records. Investigators later found malware designed specifically for IOS XR.

Routers direct data between networks. Controlling one can allow an intruder to watch traffic passing through it or use the device as a path toward other systems.

Sygnia said Fire Ant hid activity by suppressing some router logs and changing the information administrators received when they checked the equipment, leaving them with an incomplete picture of what was running on the device.

Fire Ant also recorded network traffic from several Cisco routers and sent the files to outside servers, Sygnia said. Some of that collection was carried out through a legitimate administrator account.

Investigators traced one hidden connection to another compromised computer. From there, Sygnia said, Fire Ant tested connections to other high-value systems, including systems associated with critical infrastructure.

Sygnia documented scanning and connection attempts, but did not report that those downstream systems were successfully breached.

The firm described the approach as going after a "target behind the target"-first taking control of trusted network equipment and then looking for paths into other organizations.

Administrator Logins Targeted

Fire Ant also compromised systems that verify whether network administrators are authorized to log in to routers and other equipment. Those login verification systems use a protocol known as TACACS.

Sygnia found malware embedded in that login verification process that could capture administrator credentials as administrators signed in.

The firm named the tool TacTap and said it was unaware of that particular technique having been publicly documented before.

Sygnia said Fire Ant's methods strongly overlap with those of UNC3886, another China-linked cyberespionage group previously investigated by Google-owned Mandiant. The firm stopped short of identifying the two as the same actor.

Similar techniques have been documented in other Chinese state-sponsored hacking campaigns, according to the United States and allied governments. Those campaigns were separate from Fire Ant.

A 2025 joint advisory from U.S. and allied cyber agencies described Chinese state-sponsored hackers targeting major telecommunications routers and other devices at the edges of networks.

The advisory described hidden tunnels, traffic collection, efforts to obtain administrator credentials, and use of compromised routers to reach additional networks. The agencies said much of the traffic collection they observed involved Cisco IOS devices.

The advisory did not identify Fire Ant.

Cisco's Long Record in China

Separate from the Fire Ant investigation, Cisco has a decades-long record in China involving networking equipment, technical cooperation, and a large training program.

The U.S.-China Economic and Security Review Commission wrote in 2008 that Cisco routers and switches had become "cornerstones" of Golden Shield, a Ministry of Public Security project used for police networking, internet monitoring, censorship, and surveillance.

An internal Cisco presentation from 2002 described Golden Shield as a business opportunity and listed planning, construction, technical training, and operations maintenance among areas in which Cisco could participate.

The presentation cited Chinese authorities' goal of using the system against Falun Gong and other groups they viewed as threats to Communist Party rule.

Cisco also developed a broad networking training program in China.

The company opened its first Networking Academy in mainland China at Fudan University in September 1998 and later expanded the program to universities across the country.

Cisco sued Huawei in 2003, alleging that the Chinese telecommunications company copied portions of Cisco's networking software, technical documentation, and other intellectual property.

By April 2004, Cisco said it had 198 academies in China, with 17,370 students enrolled and 20,520 graduates.

That year, Cisco signed a $37.7 million agreement with China's Ministry of Education covering networking courses, professional certifications, and instructor training at 35 national software colleges.

In October 2004, Cisco and Beijing University of Posts and Telecommunications established a network-security training center that Cisco said would train high level telecommunications security personnel and provide practical instruction to undergraduate, graduate, and doctoral students.

By 2009, Cisco said more than 100,000 students in China had received training through more than 250 networking academies.

California-based cybersecurity firm SentinelOne reported in 2025 that two people associated with companies named in the Salt Typhoon advisory appeared in Chinese university records as participants in a 2012 Cisco Networking Academy competition.

SentinelOne said corporate, patent, education, and employment records made it highly likely that the competitors were the same people later associated with the companies named in the Salt Typhoon advisory.

Those records do not connect either person to Fire Ant or establish that Cisco training was connected to their later cyber activity.

Initial Access Remains Unknown

Sygnia has not disclosed how Fire Ant first obtained the privileged access needed to compromise the Cisco routers.

Its report does not identify a Cisco vulnerability used in the attack. The Cybersecurity and Infrastructure Security Agency declined to comment on Sygnia's report.

Sygnia, Cisco, and Google's Mandiant did not respond to requests for comment by publication time.

Tyler Durden Thu, 09/03/2026 - 20:55

Veterans, architectural historian argue congressional authorization is needed for the monument near Lincoln Memorial.

The findings indicated the Common Blackbird's song is the most pleasant because it hits the ideal range across every key metric: frequency (pitch), amplitude (volume) and song structure (complexity), according to a study published Tuesday in "Frontiers in Bird Science."

The USS Abraham Lincoln aircraft carrier docked at a port in Thailand on Wednesday after being at sea for more than 250 days.

It should be obvious: Those who can’t read simple road signs should be nowhere near the wheel of a 40-ton semi-truck.

The biggest twist, the school board itself never approved the moratorium.

The crowd grew louder each time, gaining confidence that the U.S. fan favorite would not crack, not after everything they had gone through together.

This is hardly the stretch run the Mets were expecting when they opened the season with one of the highest payrolls in the game and among the loftiest expectations. 

John Lynch isn’t promising the 49ers another blockbuster trade. He is leaving the door conspicuously open. With San Francisco preparing to begin a season carrying legitimate Super Bowl expectations, Lynch indicated the team’s performance over the first two months could determine whether the front office goes shopping before the Nov. 10 NFL trade deadline. San...

Democrats Cry Foul As DHS Launches Voter Fraud Probe In 9 States

The Department of Homeland Security opened a coordinated voter fraud investigation across nine states this week, and Democratic election officials are not taking the news well...

CNN reported that internal federal guidance directs Homeland Security Investigations, the investigative arm of Immigration and Customs Enforcement, to build criminal cases against people suspected of illegally registering or voting. The effort is described as a "coordinated criminal voter fraud surge initiative" and will run from early September through mid-October.

Agents began work Tuesday in Washington, Wisconsin, Missouri, Georgia, California, Pennsylvania, Nevada, New York and Connecticut.

The operation targets noncitizens who registered or cast ballots, including immigrants accused of voting before they naturalized. DHS has directed investigators to coordinate with US Citizenship and Immigration Services, which means a noncitizen caught voting faces more than a fine. Criminal charges, a denied citizenship application and deportation are all on the table.

The enforcement push runs through DHS's Systematic Alien Verification for Entitlements program, which lets states cross-check voter rolls against federal citizenship and immigration records. Mullin announced in July that states seeking DHS election-related grants must run their rolls through SAVE as a condition of funding.

"Working with Secretary Lutnick, we are going to make our security enhancements mandatory," Mullin said.

"The machines have to be secured, and your voter registration list needs to be scrubbed. We need to make sure that individuals that are legally able to vote are voting."

Skeptics might ask whether any of this produces actual prosecutions. It has. Recent federal cases include a Honduran illegal alien arrested for voting in seven federal elections dating back to 2008, a Mexican national who pleaded guilty after falsely claiming citizenship, an Australian national arrested for voting in multiple federal elections, a Chinese national facing voter fraud charges and an illegal alien sentenced for voting under a stolen identity for more than two decades.

While Georgia Secretary of State Brad Raffensperger's office said it would comply with the investigation, officials in the targeted Democratic-run states denounced the operation almost immediately.

California Secretary of State Shirley Weber's office called the operation part of "a broader effort to intimidate Californians" and dismissed DHS's findings as "seemingly baseless."

Connecticut Democratic Secretary of State Stephanie Thomas struck a more careful tone, saying she welcomed "any investigation into election malfeasance" while hoping the intent was to find wrongdoing rather than "create chaos." 

Washington Secretary of State Steve Hobbs said he learned about the probe from media reports and complained DHS never contacted his office. "It's troubling that Homeland Security is wasting taxpayer dollars investigating a phenomenon we know to be false," Hobbs said, calling the operation "another attempt by the federal government to cause chaos and confusion ahead of the midterms." 

Wisconsin Democratic Gov. Tony Evers called the probe "a joke" and told Trump to "stay out of it because voting is a state issue and not a federal issue." 

New Jersey offers the cleanest test case of the whole fight. The Trump administration identified at least 35,000 potential noncitizen registered voters in the state. In July, Democratic Gov. Mikie Sherrill tried to get ahead of the story by admitting the state had 6,600 registered noncitizen voters herself. But then she refused to hand voter data over to the Trump administration. 

 "While ICE Homeland Security Investigations is not able to comment on any active investigations, HSI is actively rooting out and investigating election fraud wherever it can be found," a DHS spokesperson said in a statement. "Our message to aliens who vote in American elections is clear: we will find you, arrest you, and you will face the consequences—including criminal charges and deportation."

Homeland Security Secretary Markwayne Mullin has turned his department into the tip of the spear for President Trump's election integrity push, and he has done it with numbers Democrats would prefer nobody repeat. DHS has flagged more than 24,000 potential noncitizens on voter rolls nationwide since April of last year, and Mullin said an audit of four states alone, California, Pennsylvania, New Jersey and Nevada, turned up more than 250,000 potential noncitizen registrations.

"One thing that I love about numbers, and I love about facts, is they don't lie," Mullin told reporters, warning that election officials who fail to secure the midterms could face fines or jail time.

Tyler Durden Thu, 09/03/2026 - 20:30

They broke the law, but refuse to admit it. My four-year battle with the University of Washington (UW) ended when it agreed to pay $600,000 for violating my First Amendment rights.

If America wants an electrified, self-sustaining economy, it depends on states willing to permit real work.

In a unanimous decision, the court ordered that a statewide referendum be held in November to determine the ultimate fate of the new map. 

Robert Sinnott, 53, allegedly lured multiple firefighters from the Silverton Fire Company to his Toms River home under the guise of training, but would then restrain and sexually assault them.

Xavier Becerra’s campaign for California governor has been accused of ducking no fewer than eight debate invitations.

A new website has ranked San Francisco’s most “dateable” tech hotties — but not everyone has hearts in their eyes. The “San Francisco Hot List,” created by dating-app entrepreneur Celeste Amadon, features a handful of techies nominated by peers for their extraordinary combination of beauty and brains. Celeste Amadon has compiled a list of San...

Now that he has survived and made it through the other side, Austin Wells can be blunt.