Emergency patch: Cisco fixes bug under exploit in brute-force attacks

Cisco patched CVE-2024-20481, a medium-severity resource-exhaustion flaw in ASA and FTD RAVPN that is being actively exploited in brute-force VPN authentication campaigns. Attackers—observed using TOR exit nodes and proxies—are flooding devices with auth requests to exhaust resources or gain unauthorized access; CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog and Cisco published patches and IOCs with mitigation guidance.