Security News Hackers exploited Citrix, Cisco ISE flaws in zero-day attacks BleepingComputer Daniel Bender 12 Nov 2025 An advanced threat actor exploited the critical vulnerabilities "Citrix Bleed 2" (CVE-2025-5777) in NetScaler ADC and Gateway, and CVE-2025-20337 affecting Cisco Identity Service Engine (ISE) as zero-days to deploy custom malware.