Bleepingcomputer Cisco Confirms Exploitation of AsyncOS Zero-Day by Chinese Hackers
Article Content
Browse articles 
Cisco has reported an unpatched zero-day vulnerability (CVE-2025-20393) in its AsyncOS software, affecting Secure Email Gateway and Secure Email and Web Manager appliances. The vulnerability is being actively exploited by a Chinese advanced persistent threat actor, identified as UAT-9686, targeting devices with non-standard configurations and the Spam Quarantine feature enabled.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (5)
Following this threat?
Track APT41, AquaPurge and Cisco in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
New BlackX Bootkit Targets Central Asian Diplomats via Baton Drop Exploit In early 2026, a sophisticated APT campaign utilizing the BlackX UEFI bootkit was discovered targeting diplomatic agencies in Central Asia, specifically Tajikistan, Uzbekistan, and Turkmenistan. The BlackX bootkit exploits the Baton Drop vulnerability, allowing it to bypass Windows Secure Boot and maintain persistent… 
BRONZE SANDCASTLE Exploits DLL Sideloading for Cyber Attacks The BRONZE SANDCASTLE threat group, aligned with China, has been targeting organizations in Asia and Africa since mid-2025 using DLL sideloading techniques. This group employs modified Meterpreter shells, utilizing legitimate applications like Sandboxie to load malicious DLLs, notably 'sbiedll.dll'. The attacks have…