Image source: Google Images & Cisco.com

Cisco Adaptive Security Appliances (ASA) have been compromised by a state-sponsored group using two zero-days, CVE-2024-20353 and CVE-2024-20359. Attackers can install custom malware for backdoor access, highlighting the need for immediate patching, vigilant monitoring, and robust security practices.

These sophisticated attacks underscore the importance of updating network equipment and enforcing strong multi-factor authentication to protect against espionage-focused intrusions.

For full details, visit Cisco Security Advisory: Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability.

Additional reporting available via Help Net Security.