Surge in menace actors scanning Juniper, Cisco, and Palo Alto Networks gadgets

A surge in web probes focusing on gadgets from Juniper Networks, Cisco Methods, and Palo Alto Networks ought to put their admins on alert, say safety consultants.

A menace actor is probing the web utilizing default credentials for a Juniper Networks router, prompting a cybersecurity professional to warn community admins to vary the login combo from the manufacturing facility setting in the event that they haven’t already completed so.

“It’s unhappy [that a major networking company is still using a default username and password in 2025] for large, costly merchandise like this,” Johannes Ullrich, dean of analysis on the SANS Institute, who seen the surge in scans for the username “t128” and password “128tRoutes,” stated in an interview.