CISCO SAYS HACKERS HAVE BEEN EXPLOITING A CRITICAL BUG TO BREAK INTO BIG CUSTOMER NETWORKS SINCE 2023

Summary from the TLDR InfoSec newsletter

Hackers have abused a max‑severity 10.0 flaw in Cisco Catalyst SD‑WAN gear since at least 2023 to gain top‑level access, maintain stealthy persistence, and spy on or steal data from large enterprises and critical infrastructure worldwide. Governments, including the US, UK, Canada, Australia, and New Zealand, warn of global targeting.