[Stanley]

Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Dire

Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software, which it said have been exploited in the wild.
The zero-day vulnerabilities in question are listed below -

CVE-2025-20333 (CVSS score: 9.9) - An improper validation of user-supplied input

https://thehackernews.com/2025/09/urgent...under.html

[Aeowulf]

I wonder who is, or who is backing, the "advanced threat actor?"

[Vectura]

That’s critical. Two zero-days in Cisco ASA being actively exploited is no joke — admins should patch or apply mitigations immediately.

[plops]

Yeah thisreally seema like a patch is needed if not already there asap

[jcole]

Yeah thisreally seema like a patch is needed if not already there asap

I agree. Should already be an update to fix this.

[Fish]

I wonder who is, or who is backing, the "advanced threat actor?"

What if it’s the government?

[Aeowulf]

What if it’s the government?

Likely, but WHICH government is always the question.

[DAL-SHA]

Cisco ASA zero-days hitting hard with a 9.9 CVSS score? That’s firewall drama you don’t want. If you’re running ASA or FTD, patch ASAP—before hackers turn your VPN into their playground. 🔥🛡️