ArcaneDoor Threat Actor Resurfaces in Continued Attacks Against CiscoInfosecurity Magazine·Sep 26, 12:00 UTC · Sep 26, 2025Threat actorCVE-2025-20333CVE-2025-2036260
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devicesCisco Talos·Apr 24, 15:54 UTC · Apr 24, 2024Threat actorCVE-2025-20333CVE-2025-20362CVE-2025-20363+3 CVEs60
Cisco routers come under attack, including a destructive hacktivist campaignThe Record·Jan 18, 00:00 UTC · Jan 18, 2023Threat actor in the wildCVE-2020-3580CVE-2018-017160
TAG-100: New Threat Actor Uses OpenThe Hacker News·Jul 18, 13:11 UTC · Jul 18, 2024Threat actorCVE-2024-340060
State-Sponsored Hackers Exploit Two Cisco ZeroThe Hacker News·Apr 25, 16:11 UTC · Apr 25, 2024Threat actor in the wildCVE-2024-20353CVE-2024-20359CVE-2024-2035860
TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental BodiesRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Threat actor in the wildCVE-2024-340060