Cisco AsyncOS Software — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
December 17, 2025
Last Seen
December 18, 2025

Cisco AsyncOS Software is a technology platform tracked across 3 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed December 17, 2025; most recent activity December 18, 2025.

Overview

Cisco AsyncOS Software is Cisco's security operating system used by security appliances (notably Email Security Appliances and Web Security Appliances). A zero-day vulnerability in AsyncOS has been disclosed and is being actively exploited in the wild, enabling attackers to potentially run system-level code on affected devices, which heightens the risk to organizations relying on Cisco security appliances for protection.

Related Threat Clusters

  • Cisco AsyncOS Zero-Day Exploited by Chinese APT Group

    A zero-day vulnerability in Cisco AsyncOS Software has been actively exploited since late November 2025. The attack targets Secure Email Gateway and Secure Email and Web Manager, allowing attackers to execute…

    2 articles · Updated December 18, 2025
  • Cisco ASA Zero-Day Exploited in State-Espionage Campaign

    Cisco disclosed a state-espionage campaign targeting its Adaptive Security Appliances (ASA), which are used for firewall and VPN functions. Attackers exploited two zero-day vulnerabilities to infiltrate government…

    27 articles · Updated December 18, 2025
  • Cisco Confirms Exploitation of AsyncOS Zero-Day by Chinese Hackers

    Cisco has reported an unpatched zero-day vulnerability (CVE-2025-20393) in its AsyncOS software, affecting Secure Email Gateway and Secure Email and Web Manager appliances. The vulnerability is being actively exploited…

    5 articles · Updated December 17, 2025

Recent Intelligence Reports

  • Cisco Confirms a Zero-Day Security Flaw. Here's How Users Can Stay Protected — Techloy · December 18, 2025
  • Cisco Warns of Active Cyberattack Exploiting Critical AsyncOS Vulnerability — Thecyberexpress · December 18, 2025
  • Critical Vulnerability in Cisco Products — Csa.Sg · December 18, 2025
  • Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System — Cybersecuritynews · December 18, 2025
  • Cisco, SonicWall Disclose New Attacks Exploiting Zero-Day Flaws — Crn · December 17, 2025
  • UAT — Blog.Talosintelligence · December 17, 2025

CVSS v3.1 Breakdown