“Disappearing” implants, followed by first fixes for exploited Cisco IOS XE zero-day

Cisco has released the first fixes for the IOS XE zero-day (CVE-2023-20198) exploited by attackers to ultimately deliver a malicious implant. The fixes were made available on Sunday, but a curious thing happened the day before: several cybersecurity companies and organizations have noticed a drastic reduction in the number of internet-facing Cisco devices that saddled with the implant. The reason behind that change is still unclear, but several theories have been put forward. The attackers … More →

The post …

0 day attack attackers backdoor cisco cisco ios cisco ios xe companies cve cve-2023-20198 cybersecurity cybersecurity companies don't miss exploited fixes hot stuff implant implants ios ios xe malicious orange cyberdefense organizations security update ultimately zero-day