Cisco says hackers have been exploiting a critical bug to break into big customer networks since 2023

Cisco disclosed that hackers have been exploiting a maximum-severity (CVSS 10.0) flaw in its **Catalyst SD-WAN** products to gain remote, privileged, and persistent access to victim networks, with evidence of exploitation dating back to 2023; U.S. and allied governments are urging immediate remediation, and Cisco’s advisory and Talos research detail the issue.