FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

CISA and the UK's NCSC disclosed that a federal civilian agency's Cisco Firepower device running ASA software was compromised in September 2025 by the FIRESTARTER backdoor malware. The malware, designed for remote access, persisted despite security patches, indicating a sophisticated cyberattack.