Skip to content
Advanced Threat Actor Exploits Cisco and Citrix Zero-Days

Advanced Threat Actor Exploits Cisco and Citrix Zero-Days

First seen 12 Nov 2025, 19:02 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

An advanced hacker has been identified exploiting zero-day vulnerabilities in Cisco and Citrix products. The threat actor's activities were reported by CJ Moses, CISO of Amazon Integrated Security, highlighting the severity of the situation as these vulnerabilities were previously undisclosed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Cisco in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed