The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to federal government departments about insufficient patching of Cisco firewalls, leaving them vulnerable to an active hacking campaign. CISA is tracking exploitation of two security flaws in Cisco's Adaptive Security Appliance (ASA) software since September. While some agencies have applied patches, others remain vulnerable. This follows a recent hack of the Congressional Budget Office (CBO), where an unpatched Cisco firewall was found. CISA urges all agencies with affected devices to update to the latest patch version.