News Summary

BRICKSTORM Malware Campaign Targets VMware and Windows Systems In December 2025, CISA, NSA, and Canadian officials issued warnings about the BRICKSTORM backdoor, a sophisticated malware deployed by Chinese state-sponsored actors…

Cisco AsyncOS Zero-Day Exploited in the Wild Against Email Security Appliances A critical zero-day vulnerability in Cisco’s AsyncOS software powering Email Security Appliances (ESAs) and related platforms is being actively…

Active Exploitation of Cisco AsyncOS Zero‑Day in Email Security Appliances Organizations relying on Cisco Secure Email Gateway appliances are facing active exploitation of a zero‑day flaw in AsyncOS that allows…

BRICKSTORM Malware Campaign Targets VMware and Windows Systems This summary covers the December 2025 joint warning from CISA, NSA, and Canadian officials about the China-backed BRICKSTORM backdoor, a sophisticated malware…

BRICKSTORM: Long-Dwell Chinese Backdoor Targeting VMware and Windows in Critical Infrastructure A newly detailed malware family dubbed BRICKSTORM is being actively deployed by Chinese state-sponsored actors to maintain long-term, covert…

Cisco Warns of Active Exploitation of Critical Zero-Day in AsyncOS This summary covers the active exploitation of an unpatched zero-day vulnerability in Cisco AsyncOS, tracked as CVE-2025-20393, which grants root…

Cisco AsyncOS Zero-Day Exploited in the Wild on Email Security Appliances A critical zero-day vulnerability in Cisco’s AsyncOS operating system for email security appliances is being actively exploited to gain…

BRICKSTORM Malware Campaign Targets VMware and Windows Systems CISA, NSA, and Canadian officials issued a joint advisory on December 4, 2025, detailing the BRICKSTORM malware campaign attributed to Chinese state-sponsored…

CISA and NSA Warn of China-Backed BRICKSTORM Malware Campaign This joint advisory from CISA, NSA, and Canadian officials highlights a sophisticated malware operation attributed to Chinese state-sponsored actors, targeting VMware…

Cisco Warns of Active Exploitation of CVSS 10.0 Zero‑Day in Email Security Appliances Cisco has disclosed active exploitation of a critical zero‑day vulnerability, tracked as CVE‑2025‑20393, in its AsyncOS-based email…