logo

Interlock Ransomware Attack

ID: 86646e11-1dbf-5f0f-97de-ff525e225cfb

STIX ID: report--86646e11-1dbf-5f0f-97de-ff525e225cfb

Feed Name: FortiGuard Labs | FortiGuard Center - Outbreak Alerts

Threat Score
90/100

Date Published: 2026-03-19

Date Updated: 2026-07-28

...
...

An active Interlock ransomware campaign is exploiting a critical unauthenticated RCE (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC), allowing attackers to gain root on internet-facing devices and pivot into enterprise networks using fileless implants, custom malware, and remote access tooling; organizations should immediately apply Cisco patches to mitigate active exploitation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.