-DPRK hackers adopt EtherHiding
-AEM vulnerability exploited in the wild
-Cisco ZeroDisco attacks target old switches
-RCE in Sixnet industrial controllers
-Gladinet patches zero-day
-New Training Solo attack
-REcon 2025 videos
-New tools: Singularity, nightMARE, and MCP-Snitch

🚨 ZeroDisco: Cisco devices infected via CVE-2025-20352
Threat actors exploit SNMP + old Telnet RCE to plant rootkits on 9400/9300/3750G switches.

Universal password includes “disco”; attacks hide config, monitor UDP, and bridge VLANs. Patch & audit immediately.
#Cisco #ZeroDisco #CVE2025 #Infosec

⚠️ CRITICAL: A Cisco zero-day (CVE-2025-20352) is being actively exploited to install Linux rootkits on network switches. The 'ZeroDisco' campaign targets Catalyst devices. Patch immediately! #Cisco #ZeroDay #CVE #Infosec #Rootkit

🗞️ ZeroDisco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits

🔗 https://www.trendmicro.com/en_us/research/25/j/operation-zero-disco-cisco-snmp-vulnerability-exploit.html

Cyberattackers exploit Cisco SNMP flaw to deploy Linux rootkits in 'Zero Disco' campaign. Stay vigilant and update your systems promptly. #CyberSecurity #Cisco #Linux #Rootkit #ZeroDisco Link: thedailytechfeed.com/cyberattacke...