Cisco says Chinese hackers are exploiting an unpatched AsyncOS zero-day flaw – here's what we know so far

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Exploit Cisco's AsyncOS Zero-Day Vulnerability Cisco has reported that Chinese hackers are exploiting a zero-day vulnerability in its AsyncOS software, which allows unauthorized root access to Secure Email appliances. The flaw affects Cisco's Secure Email Gateway and Secure Email and Web Manager appliances, putting numerous customers at risk due to the unpatched nature of the vulnerability. 5 sources 61