Cisco AsyncOS Zero-Day Actively Exploited to Execute System

Cyberpress • December 18, 2025

Share: View original

The attack campaign is attributed to UAT-9686, assessed with moderate confidence to be a Chinese-nexus advanced persistent threat group. Cisco ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco AsyncOS Zero-Day Exploited by Chinese APT Group A zero-day vulnerability in Cisco AsyncOS Software has been actively exploited since late November 2025. The attack targets Secure Email Gateway and Secure Email and Web Manager, allowing attackers to execute system-level commands. The campaign is attributed to the UAT-9686 group, assessed to have a Chinese nexus. 2 sources 94

Extracted Entities

APT Groups (1)

Attack Types (1)

Zero-day Exploit

Platforms (1)