Unpatched security vulnerability: Cisco systems have been under attack for weeks - | Golem.de
golem.de/news/ungepatchte-sicherheitsluecke-cisco-systeme-werden-seit-wochen-attackiert-2512-203379.html
News on this topic
Cisco warns of unpatched AsyncOS zero-day exploited in attacks: Cisco warned customers today of an unpatched, maximum-severity Cisco AsyncOS zero-day actively ...
bleepingcomputer.com/news/security/cisco-warns-of-unpatched-asyncos-zero-day-exploited-in-attacks/
dlvr.it Dec 17 25
Attacks pummeling Cisco AsyncOS 0-day since late November: : No timeline for a patch
theregister.com/2025/12/17/attacks_pummeling_cisco_0day/
Similar to This
Previous
Nvidia and Cisco confirm multimillion-dollar donations to Trump's White House ballroom
cnbc.com/2026/10/15/trump-ballroom-nvidia-cisco-donations.html
Nvidia and Cisco unveil next-gen network interface built for the AI data center boom
techspot.com/news/114222-nvidia-cisco-unveil-next-gen-network-interface-built.html
Cisco patches new Secure Email Gateway zero-day exploited in attacks: Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway ...
bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/
dlvr.it Oct 14
Cisco, Nvidia team up to build fatter, faster pluggable: If you thought 1.6 Tbps was fast, just wait, Cisco's USFP targets 12.8 Tbps in a single optical ...
theregister.com/networks/2026/10/14/cisco-nvidia-team-up-to-build-fatter-faster-pluggable/5302970
Cisco tops Fortune’s list of best technology workplaces for 2026: Here’s a look at Fortune’s top 10 technology workplaces of 2026, ranked on employee ...
indianexpress.com/article/trending/top-10-listing/cisco-tops-fortunes-list-of-best-technology-workplaces-for-2026-10921157/
Cisco warns of critical flaws allowing Nexus switch takeover: Cisco released security advisories for five critical vulnerabilities in its NX-OS data center ...
bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/
Cisco Is Bringing A New Agentic Framework To Its Webex Enterprise Platform: Cisco's Dialog feature promises to turn "fragmented interactions into continuous ...
engadget.com/2278872/cisco-is-bringing-a-new-agentic-framework-to-its-webex-enterprise-platform/
Cisco warns of max severity ISE zero-day exploited in attacks: Cisco has released security updates to address a maximum-severity Identity Services Engine ...
bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/
Cisco patches Secure Email Gateway zero-day exploited in attacks: Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that ...
bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers: Cisco Talos says two recently patched Secure Firewall Management Center (FMC) ...
bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/
Cisco pushes urgent patches for actively exploited zero-day flaw crashing firewalls
neowin.net/news/cisco-pushes-urgent-patches-for-actively-exploited-zero-day-flaw-crashing-firewalls/
Cisco warns of ASA and FTD VPN flaw exploited to crash devices: Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and ...
bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/
Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks: Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager ...
bleepingcomputer.com/news/security/cisco-fixes-sd-wan-vmanage-flaw-exploited-in-zero-day-attacks/
dlvr.it Jun 05
Yet another Cisco SD-WAN 0-day under attack, and no patch in sight: Good luck, sys admins
theregister.com/security/2026/06/05/yet-another-cisco-sd-wan-0-day-under-attack-and-no-patch-in-sight/5251855
dlvr.it May 15
Cisco discloses yet another SD-WAN make-me-admin 0-day: CISA hands feds super-tight deadline for this perfect-10, actively exploited flaw
theregister.com/patches/2026/05/15/cisco-discloses-yet-another-sd-wan-make-me-admin-0-day/5241071
CISA flags new SD-WAN flaw as actively exploited in attacks: CISA has given U.S. government agencies four days to secure their systems against another Catalyst ...
bleepingcomputer.com/news/security/cisa-flags-new-sd-wan-flaw-as-actively-exploited-in-attacks/
Cisco finally fixes AsyncOS zero-day exploited since November: Cisco finally patched a maximum-severity AsyncOS zero-day exploited in attacks targeting Secure ...
bleepingcomputer.com/news/security/cisco-finally-fixes-asyncos-zero-day-exploited-since-november/
DNS error: Countless Cisco switches suddenly trapped in a boot loop - | Golem.de: Cisco switches are restarting every few minutes, disrupting company networks ...
golem.de/news/dns-fehler-unzaehlige-cisco-switches-ploetzlich-in-bootschleife-gefangen-2601-203989.html
Australia warns of BadCandy infections on unpatched Cisco devices: The Australian government is warning about ongoing cyberattacks against unpatched Cisco IOS XE ...
bleepingcomputer.com/news/security/australia-warns-of-badcandy-infections-on-unpatched-cisco-devices/
Norway recommends replacing SSL VPN to prevent breaches: The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with ...
bleepingcomputer.com/news/security/norway-recommends-replacing-ssl-vpn-to-prevent-breaches/
Key FactsNorway's Call to Replace SSL VPN for Enhanced Security
May 16, 2024 · Reading time: ~30 sec.
Summary created with AI assistance · Source: bleepingcomputer.com
Summary created with AI assistance · Source: bleepingcomputer.com
- The Norwegian National Cyber Security Centre (NCSC) advises replacing SSLVPN/WebVPN solutions due to frequent exploitation of related vulnerabilities in edge network devices by threat actors to protect corporate networks.
- Organizations under the 'Safety Act' or in critical infrastructure should adopt safer alternatives by the end of 2024.
- NCSC recommends users of Secure Socket Layer Virtual Private Network (SSL VPN/WebVPN) products to switch to Internet Protocol Security (IPsec) with Internet Key Exchange (IKEv2).
- Proposed implementation measures include reconfiguring VPN solutions, migrating to the new protocol, disabling SSLVPN, blocking incoming TLS traffic, and using certificate-based authentication.
Next