Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
Cisco FMC vulnerabilities exploited by ransomware and state-sponsored hackers
Intelligence analysis by Qwen 2.5 (3B)
Cisco's Secure Firewall Management Center (FMC) devices were compromised using two recently patched vulnerabilities, leading to attacks by ransomware and state-sponsored groups.
Cisco's FMC devices had two security flaws that were fixed. Hackers found these flaws and used them to steal information and spread malware. This shows that even big companies can have security problems.
Analysis
{"heading_1":"Talos Analysis","subheading_1":"CVE-2026-20079 and CVE-2026-20316","content_1":"Talos identified three threat clusters associated with state-sponsored and crimeware actors. CVE-2026-20079 is a maximum-severity authentication bypass flaw, while CVE-2026-20316 is a static credential vulnerability.","subheading_2":"Qilin Ransomware and Cyclops Blink","content_2":"One cluster used Qilin ransomware, while another used Cyclops Blink malware. Both are known for destructive attacks.","subheading_3":"UAT-11823 and UAT-12197","content_3":"UAT-11823 and UAT-12197 used CVE-2026-20079 and CVE-2026-20316 to deploy web shells and steal credentials. UAT-11823 also used a variant of Cyclops Blink.","subheading_4":"UAT-11988","content_4":"UAT-11988 used Qilin ransomware, which was attributed to Qilin ransomware affiliates. They collected and staged sensitive data, then deployed a Python SOCKS5 proxy and reverse SSH tunnel."}
Key points
- Cisco FMC devices were compromised using two recently patched vulnerabilities
- The vulnerabilities were exploited by ransomware and state-sponsored hackers
- Three threat clusters were identified by Talos
- Qilin ransomware and Cyclops Blink were used in the attacks
- The vulnerabilities were CVE-2026-20079 and CVE-2026-20316
Timely patching of security flaws can prevent these kinds of attacks. Companies should always keep their software up to date.
Hackers are always finding new ways to exploit security flaws. Companies need to be extra careful and vigilant to protect their systems.
