Cisco has confirmed it suffered a cyberattack, caused by the login credentials of an employee being compromised.
While Cisco says it suffered no major consequences from the May 2022 incident, the threat actor, who was able to linger around the network for a little while before being evicted, begs to differ.
According to Cisco, the attackers are initial access brokers tied to the UNC2447 cybercrime gang, Lapsus$ threat actor group, and Yanluowang ransomware(opens in new tab) operators.
