Mandiant Identifies Zero-Day Exploitation Of Cisco SD-WAN Devices

Mandiant’s investigation uncovered two distinct periods of suspicious activity spanning several months, although investigators could not determine whether both campaigns were conducted by the same threat actor.