This security news report details a warning from Australian sources regarding infections by the BadCandy malware on Cisco devices that remain unpatched. The information is sourced from a trusted security news outlet (BleepingComputer) and shared via Reddit's InfoSecNews community. While the exact Cisco device models or software versions affected are not specified, the infections are linked to devices lacking recent security updates. No known exploits in the wild or detailed technical analysis are included in the report.

Unpatched Cisco devices are at risk of infection by the BadCandy malware, which could lead to unauthorized access or disruption of network infrastructure. The exact impact depends on the capabilities of the malware and the specific device roles, but the warning implies a significant security risk for affected systems.

Organizations should promptly identify Cisco devices that have not been updated with the latest security patches and apply all relevant updates from Cisco. Since the advisory emphasizes unpatched devices, patching is the primary recommended mitigation. No additional vendor advisory or patch details are provided, so monitoring official Cisco communications for updates is advised.