CISA Issues Emergency Alert Over Widespread Cisco Zero-Day Attacks

Emergency alert: Federal agencies rush to patch Cisco firewall flaws exploited by China-linked hackers in sophisticated attacks.

By Content Team

Sep 25, 2025

ON THIS PAGE

Federal cyber authorities issued a rare emergency directive Thursday after discovering ongoing attacks exploiting zero-day vulnerabilities in Cisco firewalls. The campaign, linked to a China-affiliated group called Storm-1849, has targeted multiple government agencies since May using three critical flaws in Cisco's Adaptive Security Appliances.

Attackers can gain full control of compromised devices, install malware, and steal data. The threat group used sophisticated evasion techniques like disabling logging and crashing devices to avoid detection.

Federal agencies have until Friday to hunt for compromises, apply patches, or disconnect vulnerable devices. CISA warns the vulnerabilities pose "unacceptable risk" due to how easily they can be exploited.

Source: CyberScoop

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?