Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 07-Feb-2024 08:27:02 JST Kevin Beaumont

   Two days ago, mass exploitation of Cisco AnyConnect CVE-2020-3580 began, per @greynoise data. It’s another Positive Technologies vuln.

   77 IP addresses are hammering the internet now. https://viz.greynoise.io/query?gnql=tags%3A%22Cisco%20ASA%20XSS%20Attempt%22

   This isn’t to be confused with the other 2020 AnyConnect CVE being used by Akira ransomware group.

   There are now three Cisco ASA vulns being used by Akira and Lockbit. #threatintel