Australia warns of BadCandy infections on unpatched Cisco devices

Australian authorities have issued a warning about infections by the BadCandy malware targeting unpatched Cisco devices. The warning highlights the risk to Cisco hardware that has not been updated with the latest security patches. No specific affected versions or detailed technical vulnerability information are provided. The advisory serves as a high-priority alert for organizations using Cisco devices to review and apply relevant patches to prevent compromise.

• bleepingcomputer.com/news/security/australia-warns-of-badcandy-infections-on-unpatched-cisco-devices/ (opens in a new tab)
• reddit.com/r/InfoSecNews/comments/1oljsrt/australia_warns_of_badcandy_infections_on/ (opens in a new tab)

• PHP2Shell was probed 4 days before disclosure. Is anyone doing a look-back hunt, not just patching?News2026-10-22
• PHP2Shell: patching priorities, exposure checks, and the limits of virtual patchingNews2026-10-22
• PHP2Shell - quick mitigation pre-patchMediumVulnerability2026-10-21
• Critical RCE Alert: Full takeover of HashiCorp Vault and OpenBao. OpenBao is patched. Vault remains exposedCriticalVulnerability2026-09-29
• Critical LiteSpeed Enterprise Vulnerability Allows Root Access · Update to 6.3.7 NowAnalysis2026-09-15