ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

ThreatsDay Bulletin reviews a busy week of security developments, from government actions to new vulnerabilities and threat activity. According to CISA, the agency issued an Emergency Directive (25-03) flagging Cisco ASA and Firepower devices that were updated to vulnerable software versions, with exploitation tied to CVE-2025-20333 and CVE-2025-20362, and warning that some patched devices remained vulnerable.

The report also notes a China-linked hacking group known as UAT4356 (aka Storm-1849) is behind active exploitation of those CVEs. In the UK, the government proposed a Cyber Security and Resilience Bill requiring reporting of significant cyber incidents within 24 hours and full reporting within 72 hours, with penalties up to £100,000 per day or 10% of turnover for serious breaches.

Elsewhere, a former Intel engineer is accused of downloading 18,000 Top Secret files after being fired, as Intel seeks damages of at least $250,000. The ThreatsDay Bulletin also highlights updates such as OWASP’s Top 10 2025 Edition and a new risk landscape for web applications, alongside multiple reports on data leaks, phishing campaigns, and new malware trends.