Thehackernews
Amazon Reports Exploitation of Cisco ISE and Citrix NetScaler Zero-Days
First seen 2 Dec 2025, 18:33 UTC
•


•81% similarity
•8.6
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Amazon has identified an advanced threat actor exploiting zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix NetScaler. The attackers utilized CVE-2025-20337 and CVE-2025-5777 to deploy custom malware, taking advantage of multiple undisclosed vulnerabilities as well. This incident highlights the ongoing risks associated with unpatched software in critical infrastructure.
ThreatCluster AI
How this analysis works