Governments Warn of Zero-Day Vulnerabilities in Cisco Edge Technology

Governments, including the Cybersecurity and Infrastructure Security Agency (CISA) and the Five Eyes alliance, have issued warnings about actively exploited zero-day vulnerabilities in Cisco edge technology, with attacks dating back to 2023. This marks the second series of such exploits targeting Cisco edge devices, following a similar campaign from the previous spring. The affected technologies include network edge devices and SD-WAN solutions, though specific CVE IDs or technical details of the vulnerabilities were not disclosed. The warnings emphasize ongoing threats to critical infrastructure, with no explicit impact or mitigation measures outlined in the report.