---
title: CISA Issues Emergency Alert Over Widespread Cisco Zero-Day Attacks
description: "Emergency alert: Federal agencies rush to patch Cisco firewall flaws exploited by China-linked hackers in sophisticated attacks."
canonical_url: https://codekeeper.co/ticker/emergency-directive-cisco-firewall-zero-day-flaws
---

# CISA Issues Emergency Alert Over Widespread Cisco Zero-Day Attacks

Emergency alert: Federal agencies rush to patch Cisco firewall flaws exploited by China-linked hackers in sophisticated attacks.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Sep 25, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Federal cyber authorities issued a rare emergency directive Thursday after discovering ongoing attacks exploiting zero-day vulnerabilities in Cisco firewalls. The campaign, linked to a China-affiliated group called Storm-1849, has targeted multiple government agencies since May using three critical flaws in Cisco's Adaptive Security Appliances. Attackers can gain full control of compromised devices, install malware, and steal data. The threat group used sophisticated evasion techniques like disabling logging and crashing devices to avoid detection. Federal agencies have until Friday to hunt for compromises, apply patches, or disconnect vulnerable devices. CISA warns the vulnerabilities pose "unacceptable risk" due to how easily they can be exploited. **Source:** [CyberScoop](https://cyberscoop.com/cisa-emergency-directive-cisco-zero-days/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Femergency-directive-cisco-firewall-zero-day-flaws%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Russian FSB-Linked Worm Uses Native Windows Feature to Infiltrate Ukrainian Networks Aug 12, 2026](https://codekeeper.co/ticker/fsb-gammaworm-targets-ukraine)

[Coding Mistake Left Six Microsoft 365 Android Apps Vulnerable to Account Takeover Aug 12, 2026](https://codekeeper.co/ticker/microsoft-android-apps-security-flaw-patched)

[CISA Warns of Actively Exploited SolarWinds Serv-U Vulnerability Aug 12, 2026](https://codekeeper.co/ticker/critical-serv-u-flaw-cve-2026-28318)

[Data breaches Pentagon Data Breach Exposes Personal Info of 3 Million People Sep 30, 2026](https://codekeeper.co/ticker/us-defense-data-breach-exposes-3-million-records)