⚠️ Patch Cisco AnyConnect/ASA
I've just been looking at data from @greynoise and other firms.
There has been a significant uptick in scanning for Cisco AnyConnect VPN devices. 95% of the IPs doing it are tagged as malicious, not researchers or IoT search engines.
Additionally, there is a ballooning of exploitation attempts, which appear to be attempts to remotely fingerprint version numbers.