DHS Issues Critical Warning on Cisco Security Devices

Posted: Oct 01 2025

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency has issued an emergency directive to federal agencies warning about an exploitation campaign targeting Cisco adaptive security appliances and software. The agency said the campaign exploits zero-day vulnerabilities to gain unauthenticated remote code execution on these appliances, which “presents a significant risk to victim networks.”

Due to the serious nature of this vulnerability, which may affect private-sector infrastructure as well as the federal sector, the Treasury Department’s Office of Cybersecurity and Critical Infrastructure Protection, the Financial Services Information Sharing and Analysis Center and the Financial Services Sector Coordinating Council released alerts to industry. ABA will continue to monitor this vulnerability and continue to coordinate with OCCIP, FS-ISAC and FSSCC.

To read more, visit: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices