Cisco has finally patched maximum-level security issue targeted by hackers

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Patches Critical RCE Flaw Exploited by Hackers Cisco has released a patch for a critical remote code execution vulnerability (CVE-2025-20393) affecting its Secure Email appliances. This flaw was actively exploited by Chinese state-sponsored groups for several weeks using a tool named Aquashell. The patch also addresses persistence mechanisms that may have been installed during the exploitation. 2 sources 33