China-linked APT UAT

Securityaffairs.Co •Pierluigi Paganini • January 16, 2026

Cisco fixed a maximum severity AsyncOS flaw in Secure Email products, previously exploited as a zero-day by China-linked APT group UAT-9686. Cisco fixed a critical AsyncOS flaw, tracked as CVE-2025-20393 (CVSS score of 10.0), affecting Secure Email Gateway and Email and Web Manager, previously exploited as a zero-day by China-linked APT group UAT-9686. Cisco detected attacks […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

China-linked APT UAT Exploits Cisco AsyncOS Flaw CVE-2025-20393 Cisco identified a critical zero-day vulnerability, tracked as CVE-2025-20393, in its Secure Email products, which was actively exploited by the China-linked APT group UAT-9686. The flaw, affecting Secure Email Gateway and Email and Web Manager, was assigned a CVSS score of 10.0, indicating maximum severity. Cisco has since released a patch to address the vulnerability. 3 sources 92

Extracted Entities

China-linked APT UAT

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

CVEs (1)

Platforms (3)