ASD warns of Cisco IOS XE BADCANDY attacks

BADCANDY Hack Exploits Cisco IOS XE, Warns ASD

A bulletin about continuing cyberattacks targeting unpatched Cisco IOS XE equipment in the nation using an unauthorized implant known as BADCANDY has been released by the Australian Signals Directorate (ASD). According to the intelligence agency, the activity entails the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that enables a remote, unauthenticated attacker to […]