Cisco AsyncOS zero-day CVE-2025-20393
Critical Cisco Zero-Day Under Active Attack: What Your Security Team Must Do Now
If your organization runs Cisco Secure Email Gateway or Secure Email and Web Manager appliances, you need to act today—not tomorrow. Cisco disclosed this week that a maximum-severity zero-day vulnerability (CVE-2025-20393) is being actively exploited by a sophisticated Chinese state-sponsored threat actor tracked as UAT-9686. Recognizing this critical threat