Cybersecurity Alert: Malware Attack on U.S. Federal Agency Cisco Devices
In a concerning cybersecurity incident, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) reported that an unnamed federal civilian agency’s Cisco Firepower device was compromised by a malware called FIRESTARTER in September 2025. This backdoor malware allows remote access and control, posing serious risks to the agency’s network security.
The attack primarily impacts federal agencies using Cisco’s Adaptive Security Appliance (ASA) software. The malware exploits vulnerabilities that have since been patched, but devices compromised before the patches remain at risk. The potential consequences include unauthorized access to sensitive data and operations.
To protect against such threats, CISA recommends reimaging affected devices and performing a cold restart, which involves physically disconnecting power to the device.
Given the nature of the attack and its implications, the risk level is assessed as High. Organizations are urged to remain vigilant and ensure their systems are fully updated and monitored for unusual activity.
Source: View Original Report
