New Cisco firewall zero-day exploited to crash SSL VPN devices

Cisco has released security updates to address a zero-day denial-of-service vulnerability affecting its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software. The flaw is being actively exploited by attackers to remotely crash vulnerable firewall devices. The vulnerability specifically impacts SSL VPN functionality, allowing remote threat actors to trigger a denial-of-service condition without authentication. Cisco confirmed the vulnerability is being exploited in the wild, making it a critical priority for organizations using these firewall products. Administrators are urged to apply the available patches immediately to protect their network perimeter devices.