ð Cisco Zero-Days Under Attack & Chrome V8 Exploit
Critical Cisco IOS vulnerabilities actively exploited, Google patches Chrome V8 flaw, Cloud platform updates
CRITICAL: Cisco IOS/IOS XE Zero-Day Actively Exploited
Cisco disclosed 14 vulnerabilities in IOS and IOS XE software, including CVE-2025-20352, a high-severity stack overflow vulnerability in the SNMP subsystem that has been actively exploited in zero-day attacks before patches were available.
â ïļ Vulnerability Details
-
Type: Stack overflow in SNMP subsystem
-
Impact: Denial of Service or Remote Code Execution as root
-
Privileges: Low-privilege users can trigger DoS; admin access enables RCE
ðŊ Affected Systems
- âĒ Cisco IOS Software
- âĒ Cisco IOS XE Software
- âĒ Cisco ASA Firewalls (separate vulnerabilities)
- âĒ Cisco Firepower Threat Defense
ðĻ Immediate Actions Required:
- âĒ Apply Cisco security patches immediately
- âĒ Audit SNMP configurations and access controls
- âĒ Monitor network traffic for suspicious SNMP activity
- âĒ Review administrative access logs for unauthorized changes
Google Patches Chrome Zero-Day Exploited in Wild
Google's Threat Analysis Group discovered CVE-2025-10585, a type confusion vulnerability in Chrome's V8 JavaScript engine that was being actively exploited. This marks the sixth Chrome zero-day vulnerability exploited in 2025.
Action: Update Chrome immediately. Go to Settings â About Chrome to check for updates. The browser will auto-update on restart.
Google Cloud Apigee UI Enhancement
Google Cloud released an updated version of the Apigee UI on September 14, adding visual indicators for unused policies to help developers identify and clean up unnecessary configurations in their API management workflows.
ðŊ New Feature:
An icon now displays next to policies in the Proxy Editor side navigation that haven't been attached to any flow, making it easier to identify and remove unused policies that could clutter configurations.
Market Snapshot
ðą Currency Exchange
Daily Change
Stable near September highs
Bitcoin
$115,234
â 0.8%Ethereum
$4,456
â 0.5%Dogecoin
$0.423
â 1.8%Shiba Inu
$0.000017
â 0.9%Key Takeaways
- Cisco Urgency: Patch CVE-2025-20352 immediately - active exploitation confirmed with potential root access
- Chrome Update: Apply Chrome updates now - sixth zero-day of 2025 shows ongoing targeting of V8 engine
- SNMP Security: Review SNMP configurations and restrict access to minimize attack surface
- Developer Tools: Google Cloud Apigee update helps identify unused policies for cleaner API management
Stay Ahead of Security Threats
Get daily tech security insights delivered to your inbox