Cisco reveals zero-day attacks used by hackers to attack government networks in major threat campaign

A white padlock on a dark digital background.

Unidentified, sophisticated threat actors, possibly affiliated with nation-states in the East, were found abusing two flaws in Cisco VPNs and firewalls, to drop malware used for espionage. Their targets include governments and critical infrastructure networks all around the world.

A report from Cisco Talos as well as a joint security advisory released by the Canadian Centre for Cyber Security (Cyber Centre), the Australian Signals Directorate's Cyber Security Centre, and the UK's National Cyber Security Centre (NCSC) outlined the campaign, called the campaign “ArcaneDoor”.