CYBERSECURITY
NETWORK EQUIPMENT
SOVEREIGNTY

Backdoors alleged by Iran, cyber operations confirmed by the United States: do you really control what goes in and out of your network infrastructure?

Capture de Cloudflare Radar, « Overview for Iran » du 5 janvier au 4 février 2026 : la courbe de trafic tombe presque à zéro à partir du 9 janvier, puis remonte par à-coups jusqu’à début février.
Matthieu de Cremoux
Article by
Matthieu de Cremoux, Product & Marketing Director, France-IX
First published on LinkedIn on 8 May 2026 · view profile

Iran alleges that backdoors in American equipment were activated. The United States confirms cyber operations. Between the two, a question that concerns us directly: do you really control what goes in and out of your network infrastructure?

First of all, a word of caution is in order: in times of conflict, lies and exaggerations circulate on both sides. What follows should be read through that lens.

According to the Fars News agency, network equipment from Cisco, Juniper, Fortinet and MikroTik allegedly rebooted or stopped working simultaneously during the American strikes on the province of Isfahan. The Iranian hypothesis rests on the activation of malicious code lying dormant in the firmware.

On the American side, no direct response on the backdoors. But General Dan Caine confirmed during a briefing at the Pentagon that Cyber Command and Space Command had been the “first movers” in Operation Epic Fury, disrupting Iranian communication networks ahead of the strikes.

A very real two-way cyberwar, but with a thick fog over the technical details.

What makes these allegations hard to dismiss entirely is their historical context.

Equipment from each of the four manufacturers named has been involved in documented security incidents:

  • Snowden documents revealed in 2014 that the NSA intercepted Cisco routers during delivery to install surveillance implants;
  • Juniper discovered unauthorised code in its firewall firmware in 2015;
  • Fortinet acknowledged in 2016 hard-coded SSH passwords allowing remote access;
  • MikroTik has been repeatedly targeted by botnet operators exploiting persistent vulnerabilities.

Whether the alleged backdoors are real or not, the question they raise is legitimate: what happens when the network equipment you use is designed, manufactured and maintained by players subject to foreign jurisdictions? Do you really control what goes in and out of your infrastructure?

There is no silver bullet against this kind of risk. But there is an approach: diversify platforms, multiply paths, reduce dependence on a single technology stack. That is exactly our premise at France-IX.

A second platform, a different stack
Peering Essentiel
Discover the offer

This news was first published on LinkedIn. To comment or share it, head to the original post. → See the post

Let's carry out your project together !

Start now