CISA and NCSC warn that FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates.

The post Arcane Door Reopened: The Cisco Firepower Backdoor That Only a Hard Reboot Can Kill appeared first on Daily CyberSecurity. Related posts: CRITICAL Cisco Zero-Day (CVE-2025-20333, CVSS 9.9) Under Active Attack: VPN Flaw Allows Root RCE Rapid7 Details Cisco ASA Zero-Day Exploit Chain (CVE-2025-20362 & CVE-2025-20333) New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance