> TritonInfoSec News
Home / Sep 15, 2026 / Story
0
#4 Dark Reading general September 14, 2026 at 21:37 UTC

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

By Jai Vijayan

AI Summary

Russian APT group Sandworm is chaining Cisco vulnerabilities to deploy an upgraded variant of the Cyclops Blink botnet malware, which the FBI previously disrupted in 2022. The revival and enhancement of Cyclops Blink by a nation-state actor signals a persistent threat to network infrastructure operators using vulnerable Cisco devices.

Read full article → https://www.darkreading.com/cyberattacks-data-brea…

Relevance score: 87.0/100

# More from September 15

  1. 1
    Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation SecurityWeek
  2. 2
    Maximum Severity GitLab Flaw Puts Supply Chains at Risk Dark Reading
  3. 3
    CISA: Hackers now exploit max severity GitLab flaw in attacks BleepingComputer
  4. 5
    Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries The Hacker News
  5. 6
    Three JFrog Artifactory Flaws Exploited for Backdoor Deployment SecurityWeek
  6. 7
    ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks SecurityWeek
  7. 8
    Revolut discloses data breach exposing financial info, passports BleepingComputer
  8. 9
    New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing The Hacker News
  9. 10
    Microsoft’s Patching Schneier on Security