> TritonInfoSec News
Home / Apr 24, 2026 / Story
0
#1 The Record threat-intel April 23, 2026 at 19:03 UTC

CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March

AI Summary

CISA disclosed that an unnamed federal agency was breached through Cisco firewall vulnerabilities and infected with FIRESTARTER backdoor malware, which allowed hackers persistent access through March 2026 even after patches were applied. The incident demonstrates how threat actors can maintain long-term persistence in critical infrastructure networks despite remediation efforts.

Read full article → https://therecord.media/cisa-us-agency-breached-ci…

Relevance score: 95.0/100

# More from April 24

  1. 2
    Bitwarden CLI npm package compromised to steal developer credentials BleepingComputer
  2. 3
    New Checkmarx supply-chain breach affects KICS analysis tool BleepingComputer
  3. 4
    UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware The Hacker News
  4. 5
    UK warns of Chinese hackers using proxy networks to evade detection BleepingComputer
  5. 6
    New GopherWhisper APT group abuses Outlook, Slack, Discord for comms BleepingComputer
  6. 7
    Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case The Hacker News
  7. 8
    CISA orders feds to patch BlueHammer flaw exploited as zero-day BleepingComputer
  8. 9
    Hackers exploit file upload bug in Breeze Cache WordPress plugin BleepingComputer
  9. 10
    US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied CyberScoop