Cisco

Follow
Illustration of a cyber attack on Cisco devices, showing analysts monitoring screens with code and warnings in a dark operations room.

Operation Zero Disco exploits Cisco SNMP flaw for rootkits

Reported by AI Image generated by AI

Cyber threat actors in Operation Zero Disco have exploited a vulnerability in Cisco's SNMP service to install persistent Linux rootkits on network devices. The campaign targets older Cisco switches and uses crafted packets to achieve remote code execution. Trend Micro researchers disclosed the attacks on October 16, 2025, highlighting risks to unpatched systems.

Cisco SNMP vulnerability exploited to deploy Linux rootkits

Reported by AI

Cybersecurity firm Trend Micro has revealed Operation Zero Disco, a campaign exploiting a critical Cisco SNMP flaw to install rootkits on network devices. The attack targets older switches, enabling persistent access and evasion of detection. As of October 2025, it has compromised enterprise networks reliant on legacy infrastructure.

Cisco firewalls face widespread vulnerability risk

Reported by AI

Security researchers have identified a critical vulnerability affecting around 50,000 Cisco firewalls worldwide. The flaw could allow attackers to execute arbitrary code remotely. Cisco has urged users to patch immediately to mitigate the threat.

This website uses cookies

We use cookies for analytics to improve our site. Read our privacy policy for more information.
Decline