logo

Cisco Email Security Products Targeted in Zero-Day Campaign by China-Linked Actors

ID: 6e1ca9a9-88da-5cc8-abe4-ebe880cde3b7

STIX ID: report--6e1ca9a9-88da-5cc8-abe4-ebe880cde3b7

Feed Name: ThreatCluster

Threat Score
85/100

Date Published: 2025-12-20

Date Updated: 2026-03-31

...
...

Cisco confirmed a zero-day (CVE-2025-20393) in its Secure Email appliances is being actively exploited by actors linked to China, who have deployed the Aquashell backdoor to establish persistence.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.