Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...
Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as a key TTP.