ArcaneDoor Unlocked: Tackling State-Sponsored Cyber Espionage in Network Perimeters

**ArcaneDoor espionage campaign:** Cisco has disclosed a sophisticated, state-linked campaign that exploited two zero-day vulnerabilities in Cisco ASA/FTD devices to install Line Runner (persistent boot‑level backdoor) and Line Dancer (in‑memory shellcode execution) malware, enabling traffic interception and persistent access; vendors released patches and detection guidance, and Qualys published QIDs to aid detection and mitigation.