Unidentified attackers breach tens of thousands of Cisco devices

Cisco's unpatched IOS XE software exploited, compromising tens of thousands of devices globally. Unknown vulnerability lets attackers get full control, with most affected devices in U.S. mainly telecommunications companies. Cisco working on software fix. Attackers leveraged patched vulnerability CVE-2021-1435 and undetermined mechanism for implant installation. Risk of wide-spread exploit attempts targeting organizations for further attack activity.

Opens on CyberScoop