Cisco Firewall Zero-Day Crisis: Patch CVE-2025-20333 and CVE-20362 Immediately
A sophisticated state-sponsored campaign, linked to China-aligned threat actor UAT4356 (Storm-1849), is actively exploiting critical zero-day vulnerabilities in Cisco ASA and FTD firewalls. These vulnerabilities allow attackers to bypass authentication, execute code, and deploy persistent malware that survives reboots and firmware upgrades. Cisco and CISA have issued an emergency directive (ED 25-03) urging all organizations…