CISA instructs federal agencies to patch zero-day flaws in Cisco firewall devices

CISA officials issued the directive on Thursday. The zero-day vulnerabilities in question, CVE-2025-20362 and CVE-2025-20333, ...
SecurityWeek

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks

Cisco released emergency patches for two firewall vulnerabilities exploited as zero-days in the ArcaneDoor espionage campaign ...
SDxCentral

Best Practices for Cisco Device Configuration

In recent incidents, CISA has seen malicious cyber actors acquire system configuration files by leveraging available protocols or software on devices, such as abusing the legacy Cisco Smart Install ...
Infosecurity Magazine

ArcaneDoor Threat Actor Resurfaces in Continued Attacks Against Cisco Firewalls

An attack campaign has been identified which exploits vulnerabilities in Cisco Adaptive Security Appliance software ...
Cybernews

Multiple Cisco zero-day vulnerabilities trigger "urgent" mass patching, CISA warns

CISA warns of three previously unknown CISCO device vulnerabilities being exploited in the wild, releasing an emergency directive on Thursday to patch now.
Network World

Cisco admins urged to patch IOS, IOS XE devices

Network admins should quickly patch a vulnerability in Cisco Systems IOS and IOS XE software to remove a stack overflow ...
Security Boulevard

Cisco Firewall and VPN Zero Day Attacks: CVE-2025-20333 and CVE-2025-20362

IntroductionOn September 25, 2025, Cisco released a security advisory to patch three security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco ...
SiliconANGLE

Cisco warns customers of actively exploited critical vulnerability in IOS XE devices

Cisco Systems Inc. is warning customers of its IOS XE devices of a critical vulnerability that has no patch and is actively being exploited in the wild. The vulnerability, tracked as CVE-2023-20198, ...
Gizmodo

Hack Turns Cisco’s Desk Phone Into a Spying Device

Cisco’s internet phones—which sit on thousands of desks around the world—have been shown to be easily hacked and turned into remote spying devices. The official announcement comes two whole weeks ...