Ransomware Incident31 Aug 2026·4 sources
Interlock Ransomware Exploited Cisco FMC Flaw CVE-2026-20131 as a Zero-Day
In March 2026 Amazon Threat Intelligence reported that the Interlock ransomware group had exploited CVE-2026-20131, an unauthenticated root-level Java deserialisation flaw in Cisco Secure Firewall Management Center, from 26 January 2026, 36 days before Cisco's 4 March disclosure. CISA added it to KEV on 19 March 2026.
InterlockCisco FMCCVE-2026-20131+2
