Cisco and Five Eyes agencies are alerting organizations to a highly sophisticated attack, where threat actors compromise a Cisco SD-WAN controller via a zero-day flaw, downgrade the device to an earlier software version that is vulnerable to an older bug, before gaining root access and restoring the device to its original version.

The post Attackers Have Been Exploiting Cisco SD-WAN Zero-Day Flaw Since 2023 appeared first on Security Boulevard.