CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

CISA added CVE-2020-3259 (Cisco ASA/FTD/AnyConnect information disclosure, CVSS 7.5) to its Known Exploited Vulnerabilities catalog after evidence from security firms that Akira ransomware actors have weaponized the flaw to compromise VPN appliances; the report also notes exploitation of CVE-2023-22527 for C3RB3R and describes the evolving ransomware landscape, victim counts, and U.S. government remediation and reward efforts.