Weekly Threat & Lab Roundup: FIRESTARTER Backdoor, ASP.NET Auth Forged, and the Week's Defenses
The threat landscape this week shifted from last week’s Windows Defender zero-days to infrastructure-level attacks: a state-sponsored backdoor surviving firewall patches, an emergency Microsoft patch for ASP.NET Core, and an iOS flaw that let law enforcement recover “deleted” Signal messages. Meanwhile in the lab, Momentum Fusion went live, Nextcloud got hardened, and the Obsidian knowledge base doubled in size. Cisco FIRESTARTER: A Backdoor That Survives Reboots (and Patches) Cisco Talos published a detailed technical analysis of UAT-4356, the same state-sponsored actor behind 2024’s ArcaneDoor campaign, now targeting Cisco Firepower devices with a custom backdoor dubbed FIRESTARTER. ...