BADCANDY Hack Exploits Cisco IOS XE, Warns ASD

A bulletin about continuing cyberattacks targeting unpatched Cisco IOS XE equipment in the nation using an unauthorized implant known as BADCANDY has been released by the Australian Signals Directorate (ASD). According to the intelligence agency, the activity entails the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that enables a remote, unauthenticated attacker to … Continue reading BADCANDY Hack Exploits Cisco IOS XE, Warns ASD