September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
Cisco became aware of a new attack variant against Secure Firewall ASA and FTD devicesSecurity Affairs·Nov 6, 18:26 UTC · Nov 6, 2025Data breach in the wildCVE-2025-20333CVE-2025-2036260
Federal agencies given one day to patch exploited Cisco firewall bugsThe Record·Apr 27, 00:00 UTC · Apr 27, 2026VulnerabilityCVE-2025-20333CVE-2025-20362CVE-2025-3033360
CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through MarchThe Record·Apr 27, 00:00 UTC · Apr 27, 2026Data breachCVE-2025-20333CVE-2025-20362CVE-2025-3033360
CISA reports persistent FIRESTARTER backdoor on Cisco ASA device in federal networkSecurity Affairs·Apr 25, 00:00 UTC · Apr 25, 2026MalwareCVE-2025-20333CVE-2025-2036247
Cisco ASA zero-day vulnerabilities exploited in sophisticated attacksHelp Net Security·Nov 13, 13:30 UTC · Nov 13, 2025Exploit / PoCCVE-2025-20362CVE-2025-20333CVE-2025-2036360
"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)Help Net Security·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wildCVE-2025-20333CVE-2025-20362CVE-2025-12480+2 CVEs60
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security PatchesThe Hacker News·Apr 25, 08:20 UTC · Apr 25, 2026VulnerabilityCVE-2025-20333CVE-2025-2036260
New Cisco firewall malware can only be killed by pulling the plugHelp Net Security·Apr 24, 00:00 UTC · Apr 24, 2026MalwareCVE-2025-20333CVE-2025-2036260
UAT-4356's Targeting of Cisco Firepower DevicesCisco Talos·Apr 23, 15:10 UTC · Apr 23, 2026VulnerabilityCVE-2025-20333CVE-2025-2036247
Too many Cisco ASA firewalls still unsecure despite zero-day attack alertsHelp Net Security·Nov 13, 12:09 UTC · Nov 13, 2025Exploit / PoCCVE-2025-20333CVE-2025-20362CVE-2025-2035260
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025The Hacker News·Nov 6, 14:58 UTC · Nov 6, 2025Vulnerability in the wildCVE-2025-20333CVE-2025-20362CVE-2025-20354+2 CVEs60
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & MoreThe Hacker News·Oct 6, 11:28 UTC · Oct 6, 2025RansomwareCVE-2025-20362CVE-2025-20333CVE-2025-20363+15 CVEs60
Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER MalwareThe Hacker News·Sep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362CVE-2025-20333CVE-2025-2036360
U.S. CISA adds CISCO Secure Firewall ASA and Secure FTD flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 26, 11:22 UTC · Sep 26, 2025Exploit / PoC in the wildCVE-2025-20362CVE-2025-2033360
CISA alerts federal agencies of widespread attacks using Cisco zeroCyberScoop·Sep 25, 19:05 UTC · Sep 25, 2025Exploit / PoC in the wildCVE-2025-20333CVE-2025-20363CVE-2025-2036260
ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, StateThe Hacker News·May 27, 15:52 UTC · May 27, 2026Data breach60
⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & MoreThe Hacker News·Apr 28, 07:38 UTC · Apr 28, 2026MalwareCVE-2025-20333CVE-2025-20362CVE-2026-40372+20 CVEs147
Chinese hackers scanning, exploiting Cisco ASA firewalls used by governments worldwideThe Record·Apr 27, 00:00 UTC · Apr 27, 2026VulnerabilityCVE-2025-20333CVE-2025-2036260
Federal agencies not fully patching vulnerable Cisco devices amid ‘active exploitation,’ CISA warnsThe Record·Apr 27, 00:00 UTC · Apr 27, 2026Advisory in the wildCVE-2025-20333CVE-2025-2036260
Cisco must share more information about effects of severe bugs on businesses, senator saysThe Record·Apr 27, 00:00 UTC · Apr 27, 2026Data breachCVE-2025-20333CVE-2025-2036260
US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were appliedCyberScoop·Apr 23, 20:25 UTC · Apr 23, 2026Vulnerability in the wildCVE-2025-20333CVE-2025-2036260
It pays to be a forever studentCisco Talos·Apr 23, 18:00 UTC · Apr 23, 2026RansomwareCVE-2025-20333CVE-2025-2036260
Threat AdvisoryCisco Talos·Dec 19, 16:50 UTC · Dec 19, 2025Advisory in the wildCVE-2026-20182CVE-2025-20333CVE-2025-20362+6 CVEs160
Cisco Talos Network Intrusion PreventionCisco Talos·Dec 19, 16:46 UTC · Dec 19, 2025Ransomware in the wildCVE-2026-20182CVE-2025-20333CVE-2025-20362+1 CVEs60
Cisco Talos Malware ProtectionCisco Talos·Dec 19, 16:46 UTC · Dec 19, 2025Malware in the wildCVE-2026-20182CVE-2025-20333CVE-2025-2036260
Cisco Talos AntivirusCisco Talos·Dec 19, 16:43 UTC · Dec 19, 2025Ransomware in the wildCVE-2026-20182CVE-2025-20333CVE-2025-2036260
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploitedHelp Net Security·Nov 16, 00:00 UTC · Nov 16, 2025Exploit / PoC in the wildCVE-2025-12480CVE-2025-21042CVE-2025-62215+2 CVEs60
Cisco fixes critical UCCX flaw allowing Root command executionSecurity Affairs·Nov 7, 11:37 UTC · Nov 7, 2025VulnerabilityCVE-2025-20354CVE-2025-20333CVE-2025-2036260
Scanning Activity on Palo Alto Networks Portals Jump 500% in One DayThe Hacker News·Oct 10, 14:03 UTC · Oct 10, 2025VulnerabilityCVE-2025-20333CVE-2025-2036260
Week in review: Many Cisco ASA firewalls still unsecure, hackers claim Red Hat’s GitLab breachHelp Net Security·Oct 5, 00:00 UTC · Oct 5, 2025RansomwareCVE-2025-30247CVE-2025-20333CVE-2025-2036260
ArcaneDoor Threat Actor Resurfaces in Continued Attacks Against CiscoInfosecurity Magazine·Sep 26, 12:00 UTC · Sep 26, 2025Threat actorCVE-2025-20333CVE-2025-2036260
UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malwareSecurity Affairs·Sep 26, 11:49 UTC · Sep 26, 2025Exploit / PoCCVE-2025-20362CVE-2025-20333CVE-2025-2036360
Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation DirectiveThe Hacker News·Sep 26, 05:35 UTC · Sep 26, 2025Exploit / PoC in the wildCVE-2025-20333CVE-2025-2036260
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devicesCisco Talos·Apr 24, 15:54 UTC · Apr 24, 2024Threat actorCVE-2025-20333CVE-2025-20362CVE-2025-20363+3 CVEs60
ThreatsCisco Talos·Sep 9, 18:46 UTC · Sep 9, 2022Ransomware in the wildCVE-2025-20333CVE-2025-20362CVE-2024-457760