+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire (/showthread.php?tid=6310171)
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - Stanley - Oct 5, 2025
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire
Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software, which it said have been exploited in the wild.
The zero-day vulnerabilities in question are listed below -
CVE-2025-20333 (CVSS score: 9.9) - An improper validation of user-supplied input
https://thehackernews.com/2025/09/urgent-cisco-asa-zero-day-duo-under.html
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - Aeowulf - Oct 5, 2025
I wonder who is, or who is backing, the "advanced threat actor?"
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - Vectura - Oct 5, 2025
That’s critical. Two zero-days in Cisco ASA being actively exploited is no joke — admins should patch or apply mitigations immediately.
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - plops - Oct 5, 2025
Yeah thisreally seema like a patch is needed if not already there asap
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - jcole - Oct 5, 2025
(Oct 5, 2025 07:47 AM)plops Wrote: Yeah thisreally seema like a patch is needed if not already there asap
I agree. Should already be an update to fix this.
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - Fish - Oct 7, 2025
(Oct 5, 2025 04:42 AM)Aeowulf Wrote: I wonder who is, or who is backing, the "advanced threat actor?"
What if it’s the government?
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - Aeowulf - Oct 7, 2025
(Oct 7, 2025 01:51 AM)Fish Wrote: What if it’s the government?
Likely, but WHICH government is always the question.
RE: Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire - DAL-SHA - Oct 7, 2025
Cisco ASA zero-days hitting hard with a 9.9 CVSS score? That’s firewall drama you don’t want. If you’re running ASA or FTD, patch ASAP—before hackers turn your VPN into their playground. 🔥🛡️