đź’¨ Abstract

On Wednesday, Cisco revealed a critical vulnerability in its AsyncOS software, affecting Cisco Secure Email Gateway, Cisco Secure Email, and Web Manager. This flaw allows full device takeover by hackers, with no patches currently available. The vulnerability is being exploited in a campaign linked to Chinese hackers, targeting devices with the "Spam Quarantine" feature enabled and accessible from the internet. Cisco advises affected customers to wipe and rebuild the software.

Courtesy: Lorenzo Franceschi-Bicchierai