Conversation

Notices

1. Embed this notice
   GreyNoise (greynoise@infosec.exchange)'s status on Thursday, 02-Oct-2025 07:15:15 JST GreyNoise

   GreyNoise now has coverage for Cisco zero-days CVE-2025-20333 and CVE-2025-20362. Watch for exploit attempts in real-time:CVE-2025-20333
   (Net-new): https://viz.greynoise.io/tags/cisco-asa-vpn-input-validation-cve-2025-20333-rce-attempt?days=1CVE-2025-20362
   (Updated tag): https://viz.greynoise.io/tags/cisco-asa-directory-traversal-cve-2018-0296-and-cve-2025-20362-attempt

   #CiscoASA #Cisco #ZeroDay #CiscoZeroDays #CVE202520333 #CVE202520362 #GreyNoise #ThreatIntel

   • Embed this notice
     remy🐀 (_mattata@infosec.exchange)'s status on Thursday, 02-Oct-2025 08:15:30 JST remy🐀

     • Kevin Beaumont

     @GossiTheDog @greynoise Current CISA guidance recommends not blocking IPs related to the current campaign; which AFAICT is the first time that has ever occurred for an ED. This puts us in an interesting position. However, we also have many users equipped to utilize intel for hunting instead of outright blocking. Providing tags and reiterating the guidance given by CISA is the balance at this time.

     We urge everyone to review and follow CISA guidance. Please understand that we may not be quite as verbose as normal while we navigate this unique situation.