Cisco Zero-Day Vulnerability Exploited by LockBit and Akira (CVE-2023-20269)

Cisco recently issued an advisory regarding a zero-day vulnerability, CVE-2023-20269, in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) products. 

The zero-day vulnerability has been exploited in the wild, with reports indicating that two notorious ransomware groups, LockBit and Akira, are among those responsible for its exploitation.

A blog post by Cisco, published in late August, confirms that the Akira ransomware group has been targeting Cisco VPNs since March 2023. Furthermore, the LockBit ransomware group has also …

advisory akira asa blog cisco cve defense exploitation exploited firepower lockbit products ransomware ransomware groups reports responsible security threat threat defense vulnerability vulnerability exploited zero-day zero-day vulnerability