Attackers Target Infrastructure Management Systems

Eclypsium's September InfraTrust Pulse tracked 158 advisories covering 1,699 vulnerabilities from 17 vendors between August 25 and September 17, with 42 rated critical and 71 remotely exploitable without authentication. Attackers increasingly hit management consoles that configure network devices, holding credentials and change-control paths. Cisco confirmed active exploitation of a maximum-severity Secure Firewall Management Center authentication bypass, chained with another flaw and linked to state-sponsored actors and ransomware gangs.