AWS Discloses Long-term Exploitation of Cisco Firewall Zero-Day (infosecurity-magazine.com)

• Exploitation active since January 2026
• Targeted Cisco firewall hardware across various sectors
• Attributed to the Interlock ransomware group

"AWS threat intelligence reports that the Interlock ransomware group has been actively exploiting a zero-day vulnerability in Cisco firewalls since January 2026. This highlights persistent security gaps at the network edge and the difficulty of securing legacy hardware in critical environments."