Helpnetsecurity

Cisco Addresses AsyncOS Zero-Day Exploited by Threat Actors

First seen 16 Jan 2026, 19:05 UTC • Helpnetsecurity

•95.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cisco has released fixes for CVE-2025-20393, a zero-day vulnerability in AsyncOS. This vulnerability has been exploited by suspected Chinese threat actors since November 2025, affecting users of Cisco's AsyncOS software.

How this analysis works

Attack Flow

Continue Reading

Cisco Fixes Critical AsyncOS Vulnerability Under Attack China-linked APT UAT Exploits Cisco AsyncOS Flaw CVE-2025-20393 Chinese Hackers Exploit Cisco's AsyncOS Zero-Day Vulnerability Cisco ASA Zero-Day Exploited in State-Espionage Campaign Zero-Day Vulnerability in AsyncOS Affects Secure Email Gateway and Web Security Appliances

Cisco Addresses AsyncOS Zero-Day Exploited by Threat Actors

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading