Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access
Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.