ASD warns of BADCANDY malware exploiting unpatched Cisco IOS XE systems across Australia. The Australian Signals Directorate (ASD) has issued a security alert warning about ongoing cyberattacks targeting unpatched Cisco IOS XE devices in Australia. The attacks are linked to a previously undocumented implant called BADCANDY, which exploits a critical flaw in Cisco’s network software. Critical CVE-2023-20198 Exploit Used in Attacks The attacks leverage CVE-2023-20198 (CVSS sco