{"id":995,"date":"2026-04-24T07:18:59","date_gmt":"2026-04-24T05:18:59","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=995"},"modified":"2026-04-29T07:19:25","modified_gmt":"2026-04-29T05:19:25","slug":"firestarter-malware-survives-cisco-firewall-updates-security-patches","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2026\/04\/24\/firestarter-malware-survives-cisco-firewall-updates-security-patches\/","title":{"rendered":"Firestarter malware survives Cisco firewall updates, security patches"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cybersecurity agencies in the U.S. and U.K. are warning about a custom malware called Firestarter persisting on Cisco Firepower and Secure Firewall devices running Adaptive Security Appliance (ASA) or Firepower Threat Defense (FTD) software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The backdoor has been attributed to a threat actor that Cisco Talos tracks internally as UAT-4356, known for cyberespionage campaigns, including&nbsp;<a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/arcanedoor-hackers-exploit-cisco-zero-days-to-breach-govt-networks\/\">ArcaneDoor<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the U.K. National Cyber Security Center (NCSC) believe that the adversary obtained initial access by exploiting a missing authorization issue (CVE-2025-20333) and\/or a buffer overflow bug (CVE-2025-20362).<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2026\/04\/24\/firestarter-malware-survives-cisco-firewall-updates-security-patches\/\" target=\"_self\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/firestarter-malware-survives-cisco-firewall-updates-security-patches\/\">Firestarter malware survives Cisco firewall updates, security patches<\/a><span class=\"screen-reader-text\">: Firestarter malware survives Cisco firewall updates, security patches<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>Cybersecurity agencies in the U.S. and U.K. are warning about a custom malware called Firestarter persisting on Cisco Firepower and Secure Firewall devices running Adaptive Security Appliance (ASA) or Firepower Threat Defense (FTD) software. The backdoor has been attributed to a threat actor that Cisco Talos tracks internally as UAT-4356,&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[72],"class_list":["post-995","post","type-post","status-publish","format-standard","hentry","category-malware","tag-72"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=995"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/995\/revisions"}],"predecessor-version":[{"id":996,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/995\/revisions\/996"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}