Patch/Configuration Management

While not confirmed, researchers link incident to previously exploited bugs that may have exposed credentials.

Attacks exploiting the Cisco Adaptive Security Appliance zero-days CVE-2025-20362 and CVE-2025-20333 were noted by the UK's National Cyber Security Centre to have deployed the newly emergent RayInitiator and LINE VIPER malware strains as part of a more sophisticated and clandestine campaign, Security Affairs reports.

Experts advise to patch immediately and take services offline until remediation is complete.

Two CVEs affecting Cisco ASA firewalls, one of them critical, have been exploited in the wild.

Hackers leverage SNMP to gain full control of enterprise systems.

The flaw could allow a malicious firmware image to be uploaded despite new check functions.

Updates have been issued by Italian software firm Libraesva to address a medium-severity security flaw in its Email Security Gateway offering actively exploited in a state-sponsored attack, BleepingComputer reports.