CISCO FIREWALL FLAWS EXPLOITED BY RANSOMWARE, STATE HACKERS

The vulnerabilities in Cisco's FMC platform—a critical management tool for enterprise firewall deployments—represent a significant security risk for organizations relying on the system to protect their networks. Cisco Talos identified exploitation activity from three distinct threat clusters, indicating the flaws have attracted attention from both financially motivated ransomware gangs and government-backed threat actors. The company has already released patches, but organizations running unpatched instances remain vulnerable. FMC manages Cisco Secure Firewall devices across enterprise networks, making it an attractive target for attackers seeking broad network access. Compromise of the management center could allow threat actors to bypass firewall protections across an entire organization's infrastructure. Cisco has not disclosed specific details about the vulnerabilities' severity or attack methods. Security teams managing Cisco firewalls are urged to prioritize patching these flaws immediately and review logs for signs of unauthorized access to their FMC instances.