CVE-2025-20363 2

Vulnerability (CVE)

Arcane Door - New espionage-focused campaign found targeting perimeter network devices

Cisco Talos identified a state-sponsored campaign it tracks as UAT4356 (Microsoft calls it STORM-1849) that targeted Cisco ASA devices with two backdoors, Line Runner and Line Dancer, abusing CVE-2024-20353 and CVE-2024-20359. The actor's infrastructure...

Threat Actors & Nation-State

Threat Insights: Active Exploitation of Cisco ASA Zero Days

Cyber Risks Unit 42 Palo Alto Networks

Cisco reported that a sophisticated state-sponsored threat actor, identified as the same actor behind the earlier ArcaneDoor campaign, is actively exploiting zero-day vulnerabilities in Cisco ASA and FTD software, primarily targeting government networks...

Zero-Days & Exploits