⚠️ Ransomware crims abused Cisco 0-day weeks before disclosure

「 Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, according to Amazon security boss CJ Moses 」
https://www.theregister.com/2026/03/18/amazon_cisco_firewall_0_day_ransomware/

#cisco #0day #Ransomware #infosec

Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

: Interlock's post-exploit toolkit exposed

The Register
Ransomware crims abused #Cisco 0-day weeks before disclosure, says #Amazon security boss
https://www.theregister.com/2026/03/18/amazon_cisco_firewall_0_day_ransomware/
Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

: Interlock's post-exploit toolkit exposed

The Register
Ransomware crims abused #Cisco 0-day weeks before disclosure, says #Amazon security boss
https://www.theregister.com/2026/03/18/amazon_cisco_firewall_0_day_ransomware/
Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

: Interlock's post-exploit toolkit exposed

The Register
Ransomware crims abused #Cisco 0-day weeks before disclosure, says #Amazon security boss
https://www.theregister.com/2026/03/18/amazon_cisco_firewall_0_day_ransomware/
Amazon security boss says crims abused max-security Cisco firewall flaw weeks before disclosure

: Interlock's post-exploit toolkit exposed

The Register
U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog

The U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog.

Security Affairs
Ransomware gang exploits Cisco flaw in zero-day attacks since January

The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's Secure Firewall Management Center (FMC) software in zero-day attacks since late January.

BleepingComputer

CVE Alert: CVE-2026-20131 - Cisco - Cisco Secure Firewall Management Center (FMC) - https://www.redpacketsecurity.com/cve-alert-cve-2026-20131-cisco-cisco-secure-firewall-management-center-fmc/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-20131 #cisco #cisco-secure-firewall-management-center-fmc

CVE Alert: CVE-2026-20131 - Cisco - Cisco Secure Firewall Management Center (FMC) - RedPacket Security

**Risk verdict:** Critical, remotely exploitable root-level compromise risk—treat as an urgent “priority 1” patch candidate given the extremely low attacker

RedPacket Security

Zero-Day-Lücke in Cisco-Firewall: Interlock-Ransomware nutzte Schwachstelle 36 Tage vor Bekanntgabe aus

Cisco-Schwachstelle CVE-2026-20131 – was steckt dahinter?

https://www.all-about-security.de/zero-day-luecke-in-cisco-firewall-interlock-ransomware-nutzte-schwachstelle-36-tage-vor-bekanntgabe-aus/

#cisco #firewall #zeroday #itsecurity

Zero-Day-Lücke in Cisco-Firewall: Interlock-Ransomware nutzte Schwachstelle 36 Tage vor Bekanntgabe aus

Amazon Threat Intelligence deckt auf: Interlock-Ransomware nutzte Cisco-FMC-Schwachstelle CVE-2026-20131 als Zero-Day – inklusive vollem Toolkit-Einblick.

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit
Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure

The Interlock ransomware group has exploited a Cisco FMC zero-day RCE vulnerability in attacks since late January.

Security Affairs
Critical Cisco Firewall Flaw Exploited by Ransomware Gang for Months Before Patch

Amazon reveals Interlock ransomware gang exploited critical CVE-2026-20131 for over a month before Cisco released security patch on March 4.

The Daily Perspective