US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-20333+1 related CVE | Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server | 9.9 group max | 72% | KEV | KEV |
From the original article
4 min read at cyberscoop.com
Investigators found the malware, dubbed Firestarter, on a federal agency's network in a campaign dating back to at least September 2025. A state-sponsored hacking group has implanted a custom backdoor on Cisco network security devices that can survive firmware updates and standard reboots, U. S.
By @gregotto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.