The update also includes new details around the specific tactics and talking points impersonators use to ensnare victims.

Cisco has yet to release a patch for the actively exploited vulnerability, and attacks have been underway since at least late November.

Dave Lewis, Global Advisory CISO, 1Password

Attacker interest in the vulnerability is magnified by an unparalleled number of publicly available exploits, earning the defect the highest verified public exploit count of any CVE…

A Russian national was also indicted for running the platform.

Researchers said attackers linked to Russia’s military intelligence agency have moved from vulnerability exploits to focus on poorly configured network edge devices to keep its access to…

Jim Dolce, CEO, Lookout

The guidance gives operators a clearer map, and it reinforces that resilience grows when humans and machines work in partnership.

Researchers warn that half of the exposed vulnerable instances remain unpatched as in-the-wild exploitation grows rapidly.

Victoria Dubranova faces charges tied to her alleged role in two groups backed by the Russian government.