www.ncsc.gov.uk 2/25/2026, 5:46:14 PM · external

Attackers Target Cisco Catalyst SD WAN to Gain Persistent Access

Attackers Target Cisco Catalyst SD WAN to Gain Persistent Access
CyberSIXT Evidence Panel

THE document discusses urgent cybersecurity concerns regarding Cisco Catalyst Software Defined Wide Area Networks (SD-WAN). Malicious actors are seen targeting these networks to gain unauthorized access and maintain persistent control. Key recommendations for affected organizations include immediate threat hunting, updating to the latest software versions, and adhering to security hardening guidelines.

It emphasizes that management interfaces should not be exposed to the internet and suggests various mitigation strategies to enhance the security of Cisco Catalyst SD-WANs. Further resources for guidance and vulnerability management are provided.

View Primary Source Via www.ncsc.gov.uk

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline