Chinese hackers are behind attacks on AsyncOS Software that allow complete takeover of the appliance, company says.
Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email security appliances.
Cisco finally patched a maximum-severity AsyncOS zero-day exploited in attacks targeting Secure Email Gateway (SEG) appliances since November 2025.
Cisco bug which was actively abused since late November 2025 has finally been addressed.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results