Ransomware groups and state-sponsored hackers exploit Cisco FMC vulnerabilities

Cisco Talos reports that three separate threat clusters exploited two recently patched vulnerabilities in Cisco Secure Firewall Management Center (FMC). The attackers deployed web shells, stole credentials, created reverse shells and proxies, and in some cases deployed Qilin ransomware or Cyclops Blink.