October 1, 2026
- China-nexus UAT-11587 has hit at least 16 institutional environments across eight Asian countries — including Taiwan, India, the Philippines and Cambodia — since Talos first observed it in September 2025, delivering Antino, a Rust-compiled Windows backdoor supporting recon, shell/PowerShell execution, file transfer and in-memory shellcode (Cisco Talos). · Threat Intelligence
in An Encoded Character Away From Admin: Cisco SD-WAN Manager Exploited in the Wild