01 August 2026 - 12:17

Category: IT Fail

Hardcoded login creds in Cisco again.

CISA caught Cisco putting static web credentials into Secure FMC while hackers exploited it. Because who needs secure passwords when hotfixes exist?

Hardcoded login creds in Cisco again.

Source: SOC Prime

The Full Story

Severity: High Mood: Ridiculous

Federal agencies and poor admins running Cisco Secure FMC are currently dealing with yet another grand design flaw involving static web interface credentials that let unauthenticated remote strangers drop by for sensitive data. To keep our crumbling infrastructure afloat, we are instructed to apply vendor hotfixes immediately and endlessly monitor log files for /var/tmp/license.tmp indicators before August 1, 2026. Just another lovely Tuesday applying panic patches for problems that should never have existed.

#CiscoFail #PatchTuesday
Open article →