BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

Rapid7 Labs published multiple security updates: a months-long investigation uncovered “BPFdoor” sleeper cells deployed by a China‑nexus threat actor (Red Menshen) inside telecommunications infrastructure, enabling stealthy, persistent espionage and the ability to intercept or pivot across provider networks. Rapid7 also documented a critical Citrix NetScaler ADC/Gateway vulnerability (CVE-2026-3055) — an unauthenticated out‑of‑bounds read with a CVSS of 9.3 that impacts systems configured as a SAML Identity Provider and can leak sensitive memory. New research and a whitepaper describe weaponiz