Cisco Systems has revealed that a group of hackers exploited previously unknown vulnerabilities in its Adaptive Security Appliances, posing a significant threat to government networks globally.
The technology firm issued a warning to its customers, urging them to take immediate action to update their software in response to the breach.
In a blog post published on Wednesday, Cisco detailed the cyber intrusion, attributing it to a "sophisticated state-sponsored actor" identified as "UAT4356."
The company's investigation revealed that government networks worldwide had fallen victim to the attack.
"We have identified and patched the vulnerabilities exploited by this group," Cisco stated in the blog post, underscoring the importance of prompt software updates to mitigate the risk of further breaches.
However, the company did not provide specific details regarding the extent or impact of the breaches, which it indicated occurred earlier this year.
The revelation underscores the growing threat posed by advanced hackers targeting security equipment like routers and edge devices, which serve as crucial components in safeguarding network infrastructure.
Given their strategic position at the network perimeter, these devices have become prime targets for cyber attackers seeking to infiltrate sensitive networks.
Furthermore, Cisco warned of potential threats to network devices from other vendors, including Microsoft.
The company highlighted evidence suggesting that the UAT4356 hackers may be interested in targeting devices from various manufacturers, signalling a broader cybersecurity challenge affecting the industry.
In response to the breach, the Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on the Cisco vulnerabilities, emphasizing the need for heightened vigilance and proactive security measures.
While CISA has not confirmed any evidence of the breach impacting U.S. government networks, the agency's prompt action underscores the severity of the threat and the importance of cybersecurity preparedness in the face of evolving cyber threats.