[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV8Au6rRr7wy4RUfNSyXkrLNdzCWvLsYZ3PabPfuzmms":3},{"article":4,"iocs":48,"watch_terms":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":28,"category":29,"article_tags":32},"c08b589f-21d2-401b-8efb-3721d0df79b3","We’ve updated Emergency Directive 25-03 in response to cyber threat actors using FIRESTARTER malw...","we-ve-updated-emergency-directive-25-03-in-response-to-cyber-threat-actors-using-9dfae1","We’ve updated Emergency Directive 25-03 in response to cyber threat actors using FIRESTARTER malware to gain persistent remote access & control of Cisco Firepower & Secure Firewall devices. Review the directive & implement the recommended actions. 👉 https:\u002F\u002Ft.co\u002Fwd8D33gcOX https:\u002F\u002Ft.co\u002FjESKCC8UMn","CISA has issued an updated Emergency Directive 25-03 addressing active exploitation of Cisco Firepower and Secure Firewall devices by threat actors using FIRESTARTER malware to establish persistent remote access and control. The directive includes recommended mitigation and remediation actions for federal agencies and critical infrastructure operators.","CISA updates Emergency Directive 25-03 for FIRESTARTER malware targeting Cisco firewalls.",null,"https:\u002F\u002Fx.com\u002FCISAgov\u002Fstatus\u002F2047376000124690664","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHGm9mvXWcAAM7bQ.jpg","2026-04-23T18:04:11+00:00","2026-04-23T19:00:08.870747+00:00",9,[18,21,23,26],{"name":19,"type":20},"Cisco Firepower","product",{"name":22,"type":20},"Cisco Secure Firewall",{"name":24,"type":25},"Cisco","vendor",{"name":27,"type":25},"CISA","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":28,"icon":11,"name":30,"slug":31},"Zero-day","zero-day",[33,38,43],{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":44},{"id":45,"icon":11,"name":46,"slug":47},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[49],{"type":47,"value":50,"context":51},"FIRESTARTER","Malware used by threat actors to gain persistent remote access and control of Cisco Firepower and Secure Firewall devices",[24,27,19]]