Sophisticated threat actor targeting zero-day flaws in Cisco ISE and Citrix

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zero-Day Exploits Target Cisco ISE and Citrix Vulnerabilities Amazon reported that a threat actor is exploiting two critical vulnerabilities, CVE-2025-20337 and CVE-2025-5777, in Cisco ISE and Citrix products as zero-days. These vulnerabilities have been identified as being targeted by an advanced persistent threat actor. 2 sources 65