On March 17, we published 'Your Cisco ASA Is Getting Popped Right Now' — a step-by-step guide to blocking known attacker infrastructure... Today, Amazon Threat Intelligence confirmed who's been doing the popping: Interlock... exploiting CVE-2026-20131 as a zero-day since January 26, 2026.
