Storm Watch | Cyber News | Breaking News: Cisco IOS Vulnerability Activity Surge

Summary: GreyNoise's Storm Watch podcast, with guest Mark from Censys, reported a surge in activity around a new Cisco IOS vulnerability and related system implants, with approximately 41,983 hosts carrying the implant, up about 5,000 to 6,000 from the previous day. The implant does not persist through reboots or maintenance, but attackers can establish a more permanent entry point after implant and before reboot, and affected hosts are spread across many autonomous system organizations, likely small businesses or residential users who received devices from their ISPs.
What you should know: Roughly 41,983 implanted hosts, growing by 5,000 to 6,000 in a day, sit mostly with small businesses and residential ISP customers, and the vulnerability gives what the podcast calls top-tier, or "God mode," access to networks.

Read the original at GreyNoise Blog ↗