ARCANEDOOR - NEW ESPIONAGE-FOCUSED CAMPAIGN FOUND TARGETING PERIMETER NETWORK DEVICES

Summary from the TLDR InfoSec newsletter

The ArcaneDoor espionage tool is an example of state-sponsored actors targeting perimeter network devices from multiple vendors. It exploits two vulnerabilities, CVE-2024-20353 and CVE-2024-20359, and is not limited to Cisco devices. These authors recommend bolstering perimeter security and adopting robust security practices to prevent these types of attacks.