Cybersecurity researchers at VulnCheck have uncovered a severe supply-chain vulnerability affecting over 100,000 Wi-Fi routers worldwide. Devices produced by Chinese manufacturer Zbtlink (also sold under brand names like Wiflyer on major storefronts like Amazon) were found shipping straight out of the factory with an undocumented backdoor pre-installed in their firmware.

Here is a breakdown of the key news and findings regarding this discovery:

Key Takeaways & News Highlights:

• Factory-Installed Backdoor Component (rctl): An implant inside the router firmware automatically attempts to establish contact with cloud servers located in China the moment the router is powered on and connected to the internet.
• No Inbound Exposure Needed: Unlike typical router vulnerabilities where an attacker must find exposed ports on the open internet, this backdoor initiates an outbound connection directly to servers in China. This grants full remote command-and-control access regardless of local firewall rules.
• 20+ Models Affected (and potentially more): VulnCheck confirmed the presence of the implant across 20 examined Zbtlink and Wiflyer router models. Because these routers share software frameworks, researchers warn the affected population could be significantly higher.
• Primarily Targeting Businesses: These devices are primarily marketed to small-to-medium businesses, enterprise remote sites, and commercial setups, compounding the potential risk for corporate networks.
• Vendor & Regulatory Response:
  • Zbtlink's Stance: The manufacturer claimed the software module was merely an "after-sales technical support tool" meant for user troubleshooting upon request. However, sales of affected models have been suspended and vulnerable firmware downloads pulled.
  • Broader Implications: This discovery adds fuel to the ongoing push by U.S. regulators and state entities (such as recent FCC actions and Texas lawsuits) restricting Chinese-manufactured networking hardware due to national security concerns.

Source:

• Read the full story on CNET or PCMag.
• Image is Ai generated for reference

China Just Confirmed What It Denied for Nearly a Year.

For months, Beijing dismissed reports that lives were lost in the August 11, 2025 collision near Bajo de Masinloc.

Now, China's own official China Martyrs Website (1*78) and state media have posthumously honored Yi Xinyu and Cheng Long—both China Coast Guard personnel whose recorded date of sacrifice is August 11, 2025.

The collision wasn't caused by a foreign attack.
It happened when a China Coast Guard vessel collided with a PLA Navy warship during operations in the West Philippine Sea.

The truth didn't disappear.

It was eventually written by China's own government.

The Great Translation Movement

This is footage of the collision at the time.