Threat Source newsletter (July 1, 2021)
Summary: Cisco warned this week that a cross-site scripting vulnerability in its Adaptive Security Appliance software, CVE-2020-3580, first disclosed in October, is being exploited in the wild after a proof-of-concept became publicly available. Separately, researchers found Netfilter, a malicious rootkit disguised as a legitimate DLL that Microsoft confirmed it signed, which connects to several China-based command and control sites once installed.
Why it matters: The exploited flaw sits in a perimeter appliance whose job is to block threats from entering corporate networks, and the signed rootkit shows a Microsoft-signed binary can still lead to China-based command and control infrastructure.
Read the original at Cisco Talos ↗
- Topics
- OT / ICS & Critical Infrastructure
- Mentions
- CVE-2020-3580
- Related
- CVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026