Interlock Ransomware Targets Cisco Enterprise Firewalls

The Interlock ransomware group leveraged pre-disclosure access to a critical vulnerability in Cisco enterprise firewalls to carry out intrusions and double-extortion attacks. The exploit allowed attackers to compromise perimeter infrastructure and steal data prior to the vulnerability becoming public, emphasizing risks from zero-day access, insufficient patching, and delayed vendor disclosures. Organizations should urgently identify affected Cisco firewall models/versions, apply vendor patches or mitigations, rotate credentials and keys, hunt for related indicators of compromise in logs and E3