New Cisco firewall zero-day exploited to crash SSL VPN devices

Cisco has released security updates addressing an actively exploited zero-day vulnerability in its Adaptive Security Appliance and Threat Defense software. Attackers are remotely targeting vulnerable firewall devices to cause denial-of-service conditions by crashing SSL VPN services. Administrators are strongly advised to apply the available patches immediately.