CISA warns federal agencies to patch flawed Cisco firewalls amid ‘active exploitation’ across the US government

CISA reports active exploitation of two Cisco ASA vulnerabilities by an unnamed advanced threat actor since September, issues an emergency directive requiring federal agencies to patch affected devices, and links a confirmed breach of the Congressional Budget Office to an unpatched Cisco firewall that allowed theft of emails and chat logs.