Cybersecurity infrastructure faces rootkit attacks and Zero Trust implementation challenges

Cybersecurity professionals are facing dual challenges regarding infrastructure protection and the practical implementation of Zero Trust models.

Security appliances, including F5 BIG-IP APM and Cisco Secure Firewall Management Center, have become high-value targets. A Linux rootkit has been deployed on F5 BIG-IP devices, while vulnerabilities in the Cisco ecosystem have also been exploited. Because these appliances manage authentication and network policies, a compromise allows attackers to gain privileged control over the very infrastructure meant to reduce risk.

Simultaneously, organizations are struggling to move Zero Trust from a theoretical concept to a functional operational model. Experts suggest that Zero Trust should not be viewed as a single product but as a continuous discipline of reducing excessive trust. Effective implementation requires focusing on high-risk flows, using identity as the architectural core, and integrating networks, endpoints, applications, and data to mitigate exposure without disrupting business operations.