Federal agencies given one day to patch exploited Cisco firewall bugs

Federal agencies and organizations using Cisco Adaptive Security Appliances are being urged to take immediate action after CISA issued an emergency directive about active exploitation of two critical ASA vulnerabilities (CVE-2025-30333, CVE-2025-20362). Cisco and multiple national cyber agencies link the intrusions to a sophisticated actor associated with the ArcaneDoor campaign; attackers exploited zero-days, achieved persistent access across reboots and upgrades, and used evasion techniques such as disabling logging. Cisco published patches and detailed remediation steps including replacing credentials and resetting compromised devices to factory defaults.