⤷ Title: Amazon Exposes Advanced APT Exploiting Cisco ISE (RCE) and Citrix Bleed Two as Simultaneous Zero-Days
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 00:10:46 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Amazon Threat Intelligence #Cisco ISE #Citrix Bleed Two #Custom Web Shell #IdentityAuditAction #rce #zero_day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 00:10:46 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Amazon Threat Intelligence #Cisco ISE #Citrix Bleed Two #Custom Web Shell #IdentityAuditAction #rce #zero_day
Daily CyberSecurity
Amazon Exposes Advanced APT Exploiting Cisco ISE (RCE) and Citrix Bleed Two as Simultaneous Zero-Days
Amazon uncovered an advanced APT simultaneously exploiting Cisco ISE RCE (CVE-2025-20337) and Citrix Bleed Two (CVE-2025-5777) as zero-days. The attacker deployed a custom in-memory web shell on Cisco ISE.