Ransomware crims abused Cisco 0-day weeks before disclosure
…The implant also hoovers up system identity, domain membership, username, OS version, and privilege context, and then encrypts this data, sending it to the attacker-controlled command-and-control server using persistent…