3w ago

Canadian telecom hacked by suspected China state group

Maximum-security Cisco vulnerability was patched Oct. 2023 and exploited Feb. 2025.

4 comments

And China wants to expand economic ties with Canada? Why would they, at this point?
See, no backdoors in Huawei equipment.
- Full of them in US equipment though.
  
  The hackers exploited CVE-2023-20198 to retrieve running configuration files from the devices and modified at least one of the files to create a GRE tunnel allowing traffic collection from the network the devices were connected to.
  tbf they've been patched for ages and/or you can just turn the http web interface off, it's 2 lines of config that takes 30 seconds to apply
  We were alerted on the day and had a fix rolled out by end of day on hundreds of routers, this is a bit embarrassing for the canadian telcom tbh