Frequency
4
occurrences
First Seen
November 12, 2025
Last Seen
November 18, 2025
Related Threat Clusters
-
Advanced Threat Actor Exploits Cisco and Citrix Zero-Day Vulnerabilities
An advanced persistent threat actor exploited zero-day vulnerabilities in Cisco Identity Service Engine and Citrix NetScaler products. The attacks utilized custom malware and were detected by Amazon's MadPot honeypot…
8 articles · Updated November 12, 2025 -
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
APT Exploits Zero-Day Vulnerabilities in Cisco and Citrix Systems
An advanced persistent threat (APT) group exploited zero-day vulnerabilities in Cisco Identity Services Engine (ISE) and Citrix systems, specifically CVE-2025-5777 and CVE-2025-20337. The attacks were detected by…
16 articles · Updated November 18, 2025
Recent Intelligence Reports
- CVE-2025-20337: Actionable Report for SOC Teams — Socprime · November 18, 2025
- APT Exploits Cisco and Citrix Zero-Day Vulnerabilities — Technadu · November 13, 2025
- Sophisticated threat actor targeting zero — Cybersecuritydive · November 12, 2025
- Hackers exploited Citrix, Cisco ISE flaws in zero — Bleepingcomputer · November 12, 2025