Bleeping Computer

Cisco discloses new IOS XE zero-day exploited to deploy malware implant

Cisco disclosed a new high-severity zero-day (CVE-2023-20273) today, actively exploited to deploy malicious implants on IOS XE devices compromised using the CVE-2023-20198 zero-day unveiled earlier ...
Bleeping Computer

Cisco patches IOS XE zero-days used to hack over 50,000 devices

Cisco has addressed the two vulnerabilities (CVE-2023-20198 and CVE-2023-20273) that hackers exploited to compromise tens of thousands of IOS XE devices over the past week. The free software release ...
Dark Reading

Zero-Day Alert: Thousands of Cisco IOS XE Systems Now Compromised

A threat actor has already infected thousands of Internet exposed Cisco IOS XE devices with an implant for arbitrary code execution via an as-yet-unpatched maximum severity vulnerability in the ...
CRN

Cisco IOS XE Attacks: 7 Biggest Unanswered Questions

It’s among the most widespread cyberattack campaigns of the year, but much remains unknown about the vulnerability, the scope of the impacts and how many attackers are actually involved. As security ...
CRN

Cisco IOS XE Vulnerability: Here’s What To Know

The actively exploited vulnerability impacts any switch or router running IOS XE and has the web interface exposed to the internet, a threat researcher tells CRN. The latest zero-day vulnerability in ...