Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
BLUF
Immediate patching is critical as known Cisco FMC flaws are actively weaponized by multiple threat actors.
NEWS
Cisco Talos confirmed that three distinct threat clusters are exploiting two recently patched Secure Firewall Management Center vulnerabilities. These actors include ransomware gangs and state-sponsored entities targeting unpatched firewall management infrastructure. The exploitation is occurring despite the availability of official security updates.
Why I Care
Unpatched FMC instances risk complete network compromise, data exfiltration, or ransomware deployment by sophisticated adversaries. The involvement of state actors elevates the threat from financial gain to potential espionage and critical infrastructure disruption. Organizations relying on Cisco firewalls face immediate exposure if updates are delayed.
Next Steps
Apply Cisco FMC security patches immediately to all affected systems. Security teams should scan for unpatched instances and monitor logs for exploitation attempts within 24 hours.
Source: BleepingComputer ·