Sep 12026 ChinaLinked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs Fire Ant compromises Cisco IOS XR routers and TACACS servers to capture traffic, harvest credentials, and suppress defensive telemetry.