ED 25-03, Identify and Mitigate Potential Compromise of Cisco Devices
In effectCISA · Emergency Directive · September 25, 2025
Summary
Required agencies to inventory Cisco Adaptive Security Appliance and Firepower devices, send memory captures to CISA for forensic review, disconnect end-of-support devices, and update remaining devices by September 26, 2025, amid exploitation of zero-day flaws.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Cybersecurity and Infrastructure Security Agency (CISA)
- Type
- Emergency Directive
- Number
- ED 25-03
- Issued
- September 25, 2025
- Status
- In effect
Still in force, possibly with amendments.
CISA updated its implementation guidance on November 12, 2025 and issued a revised version (V1) on April 23, 2026.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.