Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs

Rapid7’s managed detection and response (MDR) teams have observed increased threat activity targeting Cisco ASA SSL VPN appliances (physical and virtual) dating back to at least March 2023, including several incidents that ended in ransomware deployment.

asa back cisco cisco asa dating deployment detection detection and response emergent threat response exploitation incidents managed managed detection managed detection and response managed detection and response (mdr) march mdr physical ransomware rapid7 response ssl ssl vpn targeting teams threat under virtual vpn vpns