Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices | WIRED
For years, it's been an inconvenient truth within the cybersecurity industry that the network security devices sold to protect customers from spies and cybercriminals are, themselves, often the machines those intruders hack to gain access to their targets. Again and again, vulnerabilities in “perimeter” devices like firewalls and VPN appliances have become footholds for sophisticated hackers trying to break into the very systems those appliances were designed to safeguard. Now one cybersecurity vendor is revealing how intensely—and for how long—it has battled with one group of hackers that have sought to exploit its products to their own advantage. For more than five years, the UK cybersecurity firm Sophos engaged in a cat-and-mouse game with one loosely connected team of adversaries who targeted its firewalls. The company went so far as to track down and monitor the specific devices on which the hackers were testing their intrusion techniques, surveil the hackers at work, and ultimate
Save this story Save this story For years, it's been an inconvenient truth within the cybersecurity industry that the network security devices sold to protect customers from spies and cybercriminals are, themselves, often the machines those intruders hack to gain access to their targets. Again and again, vulnerabilities in “perimeter” devices like firewalls and VPN appliances have become footholds for sophisticated hackers trying to break into the very systems those appliances were designed to safeguard. Now one cybersecurity vendor is revealing how intensely—and for how long—it has battled wi
saved by
related reading
- Countering misuse of AI: September 2026 / Anthropicanthropic.com
- U.S. government is 'biggest buyer' of zero-day vulnerabilities, report claims | CSO Onlinecsoonline.com
- Disrupting the first reported AI-orchestrated cyber espionage campaign \ Anthropicanthropic.com
- China Flaunts Its Offensive Cyber Powerwarontherocks.com
- Hacking OpenAIhacktron.ai
- Researchers Say China State-backed Hackers Breached a Digital Certificate Authoritythehackernews.com
- Email Compromise To Mass Phishing Campaigndarktrace.com
- The Soze Syndicate - Business Email Compromise Campaign | Todyltodyl.com
- The End-State Fallacy: Where Is AI Security Headed?endstatefallacy.com
- China's Technological Playbookthecounterfactual.substack.com
- How a Tiny Startup Became the Most Important Hacking Shop You’ve Never Heard Ofvice.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com