China-linked APT UAT

Securityaffairs.Co •Pierluigi Paganini • December 19, 2025

Cisco disclosed a critical zero-day (CVE-2025-20393) in Secure Email Gateway and Secure Email and Web Manager, actively exploited by a China-linked group. Cisco disclosed a critical zero-day, tracked as CVE-2025-20393, in Secure Email Gateway and Secure Email/Web Manager, which is actively exploited by a China-linked threat group. Cisco reported a December 10 campaign targeting certain […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

China-linked APT UAT Exploits Cisco AsyncOS Flaw CVE-2025-20393 Cisco identified a critical zero-day vulnerability, tracked as CVE-2025-20393, in its Secure Email products, which was actively exploited by the China-linked APT group UAT-9686. The flaw, affecting Secure Email Gateway and Email and Web Manager, was assigned a CVSS score of 10.0, indicating maximum severity. Cisco has since released a patch to address the vulnerability. 3 sources 92

Extracted Entities

China-linked APT UAT

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (2)