50,000 Cisco firewalls vulnerable to actively exploited RCE flaws CVE-2025-20333 and 20362 Cisco and CISA urge immediate patching; no workarounds available for affected ASA/FTD devices Shadowserver ...

Cisco is facing a series of critical zero-day vulnerabilities, which are actively being exploited. These flaws affect two of Cisco’s most foundational product lines - Cisco Adaptive Security ...

Cisco has issued an urgent advisory about a zero-day vulnerability in its Adaptive Security Appliance (ASA) devices. The flaw is currently under active exploitation by an advanced threat group, ...

A severe zero-day vulnerability affecting the Cisco Adaptive Security Appliance (ASA) devices is currently being exploited, allowing attackers to hijack sessions and bypass Duo multifactor ...

The U.K. National Cyber Security Centre (NCSC) has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver ...

A newly identified cyber-attack campaign has exploited Cisco Adaptive Security Appliance (ASA) devices in a sophisticated operation linked to the espionage-focused ArcaneDoor threat actor. The attacks ...

The US Cybersecurity and Infrastructure Security Agency (CISA) is warning of three previously unknown CISCO vulnerabilities being exploited in the wild, releasing an emergency directive on Thursday to ...

IntroductionOn September 25, 2025, Cisco released a security advisory to patch three security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco ...

Technology giant Cisco disclosed a suite of vulnerabilities in its firewall devices, warning that active exploitation is underway and catching the attention of cyber security agencies around the world ...

A critical zero-day vulnerability in certain Cisco Systems firewalls has to be patched immediately, US and UK cyber authorities warned Thursday. They said exploits of the hole are part of ongoing ...

Cisco published advisories and a supplemental post about three zero-day vulnerabilities, two of which were exploited in the wild by an advanced threat actor associated with the ArcaneDoor campaign.