on April 23, 2026 at 3:10 pm — UAT-4356’s Targeting of Cisco Firepower Devices
Cisco Talos is aware of UAT-4356‘s continued active targeting of Cisco Firepower devices’ Firepower eXtensible Operating System (FXOS). UAT-4356 exploited n-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) to gain unauthorized access to vulnerable devices, where the threat actor deployed their custom-built backdoor dubbed “FIRESTARTER.” FIRESTARTER considerably overlaps with the technical capabilities of RayInitiator’s Stage 3 shellcode that […]
on April 23, 2026 at 3:10 pm — UAT-4356’s Targeting of Cisco Firepower Devices Read More »