Amazon Reports Exploitation of Cisco ISE and Citrix NetScaler Zero-Days

Amazon Reports Exploitation of Cisco ISE and Citrix NetScaler Zero-Days

First seen 2 Dec 2025, 18:33 UTC ThehackernewsYahooSecurityaffairs.CoFeeds.Feedburner 81% similarity 8.6

Article Content

Browse articles
ThreatCluster

Amazon has identified an advanced threat actor exploiting zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix NetScaler. The attackers utilized CVE-2025-20337 and CVE-2025-5777 to deploy custom malware, taking advantage of multiple undisclosed vulnerabilities as well. This incident highlights the ongoing risks associated with unpatched software in critical infrastructure.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story