Perimeter Weaponization and the AI Zero Trust Pivot: F5, Cisco, and Tencent AI-Infra-Guard
Threat actors are currently deploying specialized Linux rootkits on F5 BIG-IP APM devices and exploiting vulnerabilities in Cisco Firepower Management Center (FMC) to establish persistence and enable undetected network interception. Simultaneously, the proliferation of autonomous AI agents is bypassing traditional point-in-time Zero Trust verification, necessitating a transition toward high-velocity continuous authentication. CISA has added five newly exploited CVEs to its Known Exploited Vulnerabilities (KEV) catalog, mandating immediate patching for federal and regulated entities. To mitigate AI-specific infrastructure risks, Tencent has released AI-Infra-Guard, an open-source scanning engine designed to detect systemic vulnerabilities within AI-driven environments.