compromised edge devices

This tag covers discussions about compromised edge devices, including SOHO routers, IoT gear, and smart devices that have been co-opted by threat actors. A key focus is on CISA advisories detailing how China-nexus groups build covert networks from these devices for espionage, pre-positioning, and scaling operations. The content highlights the structural shift from individually procured infrastructure to large, externally provisioned networks of compromised devices, making detection and attribution harder for defenders. Topics include the resilience of these botnet-like ecosystems, multi-actor reuse, and the implications for enterprise and home network security.