Amazon’s threat intelligence teams uncovered an Interlock ransomware campaign exploiting a zero-day flaw in Cisco Secure Firewall Management Center (FMC), tracked as CVE-2026-20131. MadPot honeypots recorded exploitation beginning January 26, 2026—36 days before Cisco’s disclosure—and revealed the attackers’ multi-stage toolkit, post-exploitation RATs, memory-resident webshells, and organized data-exfiltration infrastructure while confirming no...

external partners thoroughly examined every system read more about Kettering Health confirms Interlock ransomware behind cyberattack