Chinese hackers are behind attacks on AsyncOS Software that allow complete takeover of the appliance, company says.
At least one of these groups allegedly targeted Cisco Secure Email Gateway, and Cisco Secure Email and Web Manager instances ...
Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email ...
Cisco confirms zero‑day (CVE‑2025‑20393) in Secure Email appliances exploited by China‑linked actors Attackers deployed Aquashell backdoor, tunneling tools, and log‑clearing utilities for persistence ...
“There are no workarounds identified that directly mitigate the risk concerning this attack campaign,” is not what you want to read, having just been informed of a zero-day exploit concerning a Common ...