Post by Cybersecurity and Infrastructure Security Agency

We’ve updated Emergency Directive 25-03 and released Malware Analysis Report: FIRESTARTER Backdoor in response to threat actors exploiting CVE-2025-20333 & CVE-2025-20362 vulnerabilities to gain persistent remote access and control over Cisco Firepower and Secure Firewall devices. FIRESTARTER malware can survive patching and allows threat actors to re-access compromised devices. Review and implement detection and mitigation actions to ensure your organization is protected 👉 https://go.dhs.gov/5Zf & https://go.dhs.gov/5Zw