CISA Warns Feds to Fully Patch Actively Exploited Cisco Flaws

CISA warns federal agencies to patch flawed Cisco firewalls amid 'active exploitation' across the US government

The federal cybersecurity agency said some government departments had been actively exploited after failing to properly patch their systems.

CISA warns feds to fully patch actively exploited Cisco flaws

CISA warned federal agencies to fully patch two actively exploited vulnerabilities in Cisco Adaptive Security Appliances (ASA) and Firepower devices.

CISA Urges Federal Agencies to Patch Cisco Firewall Flaws Amid Ongoing Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that federal departments are not patching quickly enough to defend against an active hacking campaign exploiting two vulnerabilities in Cisco’s Adaptive Security Appliance (ASA) software. The flaws affect enterprise firewalls widely used by corporations and government agencies, and CISA said it is currently “tracking active exploitation” by an “advanced” threat actor tha…

"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)

CISA has ordered US federal agencies to fully address CVE-2025-20333 and CVE-2025-20362 in Cisco ASA and Firepower devices.

CISA Warns of Federal Agencies Not Fully Patching Actively Exploited Cisco ASA or Firepower Devices

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding federal agencies. Failing to properly patch Cisco Adaptive Security Appliances (ASA) and Firepower Threat Defense (FTD) devices against actively exploited vulnerabilities. Under Emergency Directive 25-03, CISA has identified two severe CVEs posing unacceptable risks to federal information systems: CVE-2025-20333, which enables remote […] The post CI…

Federal agencies not fully patching vulnerable Cisco devices amid ‘active exploitation,’ CISA warns

Federal civilian agencies are not patching vulnerable Cisco devices sufficiently to protect themselves from an active hacking campaign, the Cybersecurity and Infrastructure Security Agency warned.