Live and recent posts from across the Fediverse tagged #cve202520333, aggregated by home.social.
CISA Warns of Persistent Cisco Backdoor on Federal Networks
The Cybersecurity and Infrastructure Security Agency (CISA) has detected a sneaky backdoor, dubbed Firestarter, lurking on federal networks, which may not have been fully eliminated by Cisco's recent patches. Federal agencies are now on high alert, urged to hunt for this stealthy malware that could compromise their networks.
Endlich führt die Uni #WireGuard über #EduVPN ein – und wir sind sehr begeistert! 🎉 Danke an das URZ, dass die Uni aus der #Cisco‑ASA‑Monopol‑Abhängigkeit löst und damit mehr Sicherheit & #Freiheit für uns Studis schafft. Open‑Source‑Lösungen stärken Transparenz und #Unabhängigkeit. 🙏🚀
#ciscoASA #CVE202520333 #CVE202520362 #StaySafeOnline #SecurityAwareness #UniVPN #CampusNetwork #GPLv2 #URZ #AntiMonopoly
Attackers going after your Cisco firewalls!
Check your Cisco firewalls regarding the mentioned CVEs and follow required actions to avoid unexpected reboots: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices
#Cisco #Firewalls #ASA #Vulnerabilities #CVE202520333 #CVE202520362
GreyNoise now has coverage for Cisco zero-days CVE-2025-20333 and CVE-2025-20362. Watch for exploit attempts in real-time:
CVE-2025-20333 (Net new): https://viz.greynoise.io/tags/cisco-asa-vpn-input-validation-cve-2025-20333-rce-attempt?days=1
CVE-2025-20362 (Updated tag): https://viz.greynoise.io/tags/cisco-asa-directory-traversal-cve-2018-0296-and-cve-2025-20362-attempt
#CiscoASA #Cisco #ZeroDay #CiscoZeroDays #CVE202520333 #CVE202520362 #GreyNoise #ThreatIntel
Nearly 50,000 Cisco firewalls are under attack—hackers can bypass protection without a password. Are you sure your network is safe? Time to patch up before it's too late.
#cisco
#firewallvulnerabilities
#cve202520333
#cve202520362
#cybersecurity
#networksecurity
#zeroday
#patchmanagement
#infosec
🚨GreyNoise has published a new Situation Report on Cisco ASA reconnaissance activity we observed before the new zero-days were disclosed.
Read the full report: https://info.greynoise.io/hubfs/Situation-Reports/SITREP-Cisco-Zero-Days.pdf
#Cisco #ASA #CiscoASA #GreyNoise #ThreatIntel #CVE202520333 #CVE202520362
Agencies Around the Globe Urge Patching of Cisco ASA Bug Under Active Exploit https://thecyberexpress.com/cisa-warns-of-cve-2025-20333/ #remotecodeexecution #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202520333 #CVE202520362 #CyberNews #Cisco
🚨 [CISA-2025:0925] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2025:0925)
CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.
⚠️ CVE-2025-20333 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-20333)
- Name: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
- Action: The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- Notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333
⚠️ CVE-2025-20362 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-20362)
- Name: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
- Action: The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- Notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW ; https://nvd.nist.gov/vuln/detail/CVE-2025-20362
#SecDB #InfoSec #CVE #CISA_KEV #cisa_20250925 #cisa20250925 #cve_2025_20333 #cve_2025_20362 #cve202520333 #cve202520362
Cisco's trusted security gear now faces a double threat—hackers exploiting twin zero-days to bypass defenses and seize control. Are your systems patched up? Discover the details behind this alarming vulnerability.
#cisco
#zeroday
#cybersecurity
#vulnerabilities
#cve202520333
#cve202520362