Australia Warns of BadCandy Infections on Unpatched Cisco Devices

Australia's cybersecurity authorities have issued a warning about the BadCandy malware infections targeting unpatched Cisco devices. This malware exploits vulnerabilities in Cisco products that have not been updated with the latest security patches, leading to potential unauthorized access and control by attackers. The alert emphasizes the critical need for organizations using Cisco hardware to promptly apply security updates to mitigate the risk of compromise. BadCandy is known for its ability to infiltrate network devices, potentially allowing attackers to intercept data, disrupt operations, or use the compromised devices as a foothold for further attacks. The Australian Cyber Security Centre (ACSC) advises network administrators to verify their Cisco devices' firmware versions and ensure all security patches are applied without delay. Failure to do so could result in significant security breaches, data loss, and operational disruptions. This incident highlights the ongoing threat posed by malware targeting network infrastructure and the importance of maintaining up-to-date security measures. Organizations are encouraged to implement robust patch management policies and continuous monitoring to detect and respond to such threats effectively. In conclusion, the BadCandy malware infections on unpatched Cisco devices serve as a critical reminder of the vulnerabilities in network hardware and the necessity of proactive cybersecurity practices to protect sensitive information and maintain network integrity.

This Cyber News was published on www.bleepingcomputer.com. Publication date: Fri, 31 Oct 2025 15:40:03 +0000


Cyber News related to Australia Warns of BadCandy Infections on Unpatched Cisco Devices

Australia Warns of BadCandy Infections on Unpatched Cisco Devices - Australia's cybersecurity authorities have issued a warning about the BadCandy malware infections targeting unpatched Cisco devices. This malware exploits vulnerabilities in Cisco products that have not been updated with the latest security patches, ...
2 months ago Bleepingcomputer.com CVE-2023-20271 CVE-2023-20272
Cisco IOS XE BadCandy Web Shell: A New Threat to Network Security - Cisco IOS XE, a widely used network operating system, has been found vulnerable to a new web shell threat named BadCandy. This malicious web shell allows attackers to gain unauthorized access and control over network devices running Cisco IOS XE, ...
2 months ago Cybersecuritynews.com CVE-2024-12345
Embracing Sustainability: Embark on the Journey to a More Sustainable Future! - Sustainability isn't just about protecting the planet for future generations. It's also about preserving the delicate balance that allows life to thrive today and tomorrow. In a world where environmental concerns are growing more urgent with each ...
2 years ago Feedpress.me
Over 40,000 Cisco IOS XE devices infected with backdoor using zero-day - More than 40,000 Cisco devices running the IOS XE operating system have been compromised after hackers exploited a recently disclosed maximum severity vulnerability tracked as CVE-2023-20198. There is no patch or a workaround available and the only ...
2 years ago Bleepingcomputer.com CVE-2023-20198
Cisco patches IOS XE zero-days used to hack over 50,000 devices - Cisco has addressed the two vulnerabilities that hackers exploited to compromise tens of thousands of IOS XE devices over the past week. The free software release comes after a threat actor leveraged the security issues as zero-days to compromise and ...
2 years ago Bleepingcomputer.com CVE-2023-20198
What's Coming to Cisco Live Europe 2024 for the Data Center Developer? - In just a week or so, Cisco Live EMEA, 2024 will be ready to sizzle at the RAI Amsterdam. From a Cisco Cloud Networking standpoint, Cisco Nexus Dashboard, Cisco ACI, and Nexus 9000 Series switches are showing up in a big way. Read on to learn what ...
1 year ago Feedpress.me
Cisco discloses new IOS XE zero-day exploited to deploy malware implant - Cisco disclosed a new high-severity zero-day today, actively exploited to deploy malicious implants on IOS XE devices compromised using the CVE-2023-20198 zero-day unveiled earlier this week. The company said it found a fix for both vulnerabilities ...
2 years ago Bleepingcomputer.com CVE-2023-20198 CVE-2023-20273 CVE-2021-1435
Building Data Center Infrastructure for the AI Revolution  - This is part two of a multi-part blog series on AI. Part one, Why 2024 is the Year of AI for Networking, discussed Cisco's AI networking vision and strategy. This blog will focus on evolving data center network infrastructure for supporting AI/ML ...
1 year ago Feedpress.me
5 Tips for Pi Day Savings at the Cisco Learning Network Store - Save 25% on select training products from the Cisco Learning Network Store for 24 hours only. Two new multicloud training courses are now available in the Cisco Learning Network Store-and they're included in the Pi Day Sale. If you are an active ...
1 year ago Feedpress.me
Cisco Adds New Security and AI Capabilities in Next Step Toward Cisco Networking Cloud Vision - PRESS RELEASE. AMSTERDAM, Feb. 6, 2024 /PRNewswire/ - CISCO LIVE EMEA - Cisco, the leader in networking and security, today introduced new capabilities and technologies across its networking portfolio that are designed to drive a more unified and ...
1 year ago Darkreading.com
Cisco says critical Unity Connection bug lets attackers get root - Cisco has patched a critical Unity Connection security flaw that can let unauthenticated attackers remotely gain root privileges on unpatched devices. Unity Connection is a fully virtualized messaging and voicemail solution for email inboxes, web ...
2 years ago Bleepingcomputer.com CVE-2024-20287
Over 10,000 Cisco devices hacked in IOS XE zero-day attacks - Attackers have exploited a recently disclosed critical zero-day bug to compromise and infect more than 10,000 Cisco IOS XE devices with malicious implants. The list of products running Cisco IOS XE software includes enterprise switches, aggregation ...
2 years ago Bleepingcomputer.com CVE-2023-20198
Number of hacked Cisco IOS XE devices plummets from 50K to hundreds - The number of Cisco IOS XE devices hacked with a malicious backdoor implant has mysteriously plummeted from over 50,000 impacted devices to only a few hundred, with researchers unsure what is causing the sharp decline. This week, Cisco warned that ...
2 years ago Bleepingcomputer.com CVE-2023-20198 CVE-2023-20273
DP World confirms data stolen in cyberattack, no ransomware used - International logistics giant DP World has confirmed that data was stolen during a cyber attack that disrupted its operations in Australia earlier this month. The company says no ransomware payloads or encryption was used in the attack. On November ...
2 years ago Bleepingcomputer.com
Congratulations to our 2023 CX Customer Hero Award Winners - There is no event quite like Cisco Live for our Customer Experience team. Successful transformation happens when innovative leaders dream big and collaborate with Cisco CX to execute on those dreams. Today, we are presenting a Cisco CX Customer Hero ...
2 years ago Feedpress.me
Accelerating Your Journey to the 128-bit Universe - The 2023 National Cybersecurity Strategy requires acceleration of your agency's mission to go boldly into the 128-bit address space universe with greater speed and urgency. IPv6-only is the addressing standard for the U.S. Federal Government, ...
2 years ago Feedpress.me
Exploit released for critical Cisco IOS XE flaw, many hosts still hacked - Public exploit code is now available for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198 that was leveraged as a zero-day to hack tens of thousands of devices. Cisco released patches for most releases of its IOS XE software but ...
2 years ago Bleepingcomputer.com CVE-2023-20198
ASD Warns of Ongoing BadCandy Attacks Targeting Australian Networks - The Australian Signals Directorate (ASD) has issued a warning about ongoing cyberattacks involving the BadCandy malware targeting Australian networks. These attacks are sophisticated and persistent, aiming to compromise sensitive information and ...
2 months ago Thehackernews.com CVE-2025-12345 BadCandy
CVE-2021-41769 - A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < ...
3 years ago
Embrace the Multicloud Era with Cisco Learning and Certifications at Cisco Live Amsterdam - It's time to come together with experts and thousands of your peers to connect, learn, and advance your career with the Learning & Certifications team at Cisco Live Amsterdam, February 5-9, 2024. Let's dive into how you can make the most of your ...
1 year ago Feedpress.me
Webex announces comprehensive Device Management Capabilities with Phonism integration - Webex is excited to announce a comprehensive solution for 3rd party Device Management referred to as 'Partner Managed Devices. ' Partner Managed Devices allows Webex Cloud Calling offers to support a flexible Device Management strategy. With this ...
2 years ago Feedpress.me
Ransomware Taskforce: Australia Leads International Effort Against Cyberattackstitle - In response to the devastating effects of ransomware around the world, a new international effort is being led by Australia to tackle the growing cyber threat. Announced in July 2018, Australia’s Prime Minister, Malcolm Turnbull, formed the ...
2 years ago Csoonline.com
Join Customer Experience for Cisco Live EMEA Demos - In her blog, Countdown to Cisco Live EMEA, Adele Trombetta, SVP, Cisco Customer Experience EMEA, mentioned how excited she is for Cisco Live EMEA in just a little more than a week, and I agree. I want to go a little deeper and give you some more ...
1 year ago Feedpress.me
Cisco warns that Unified CM has hardcoded root SSH credentials - "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root ...
6 months ago Bleepingcomputer.com CVE-2025-20309
20 Best Remote Monitoring Tools - 2025 - What is Good ?What Could Be Better ?Strong abilities to keep an eye on devices and systems.Some parts may take time to figure out.It gives you tools for remote control and troubleshooting.There could be more ways to change things.Lets you automate ...
9 months ago Cybersecuritynews.com