Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

China-linked Fire Ant APT expands campaign to compromise Cisco IOS XR routers, TACACS servers, and Linux management hosts for high-value network control.