Related Threat Clusters
-
Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies
A sophisticated backdoor malware named Firestarter has been discovered on Cisco Firepower devices, attributed to the state-sponsored threat actor UAT-4356. The malware exploits two vulnerabilities, CVE-2025-20333 and…
37 articles · Updated April 23, 2026 -
Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls
Cisco has disclosed critical vulnerabilities in its Unified Contact Center Express (CCX) platform and Adaptive Security Appliances (ASA) that allow unauthenticated remote attackers to execute arbitrary code and…
10 articles · Updated November 10, 2025 -
Cisco Warns of New Attack Variant Targeting Firewalls
Cisco Systems has issued a warning regarding a new attack variant targeting its Secure Firewall devices, leveraging vulnerabilities CVE-2025-20333 and CVE-2025-20362. These vulnerabilities could potentially lead to…
4 articles · Updated November 6, 2025 -
Cisco Firewalls Targeted by New Attack Variant Exploiting Critical Vulnerabilities
Cisco has reported ongoing attacks against its firewalls, specifically targeting vulnerabilities CVE-2025-20333 and CVE-2025-20362. These flaws allow remote code execution and unauthorized access, leading to potential…
20 articles · Updated November 14, 2025
Recent Intelligence Reports
- Firestarter malware survives Cisco firewall updates, security patches — Bleepingcomputer · April 24, 2026
- CISA: Malware attack compromises US agency via Cisco exploit | brief — Scworld · April 24, 2026
- Attackers Breach US Agency via Cisco Firewall Flaws, Distribute Firestarter Malware — Technadu · April 24, 2026
- US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied — Cyberscoop · April 23, 2026
- Cisco Firewalls Under Siege: The Escalating Zero-Day Assaults of 2025 — Webpronews · November 8, 2025
- Cisco Firewalls Under Siege: New Exploits Spark Urgent Patch Warnings — Webpronews · November 6, 2025
- Chinese Threat Actors Continue To Scan & Exploit Cisco ASA Firewalls Worldwide — Linkedin · November 2, 2025