Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

Cisco disclosed that three threat clusters linked to ransomware and state-sponsored attacks exploited two patched Secure Firewall Management Center vulnerabilities. The attacks leverage CVE-2026-20079, a critical authentication bypass with a CVSS score of 10.0, allowing unauthenticated remote attackers to bypass security controls.