Tech
UK, US urge Cisco users to ditch end-of-life security appliances | Computer Weekly
An ongoing campaign of cyber attacks orchestrated through vulnerabilities found in the Cisco Adaptive Security Appliance (ASA) family of unified threat management (UTM) kit has prompted warnings from both the British and American authorities for users to unplug and discard outdated, out-of-support equipment.
Cisco ASA is a multipurpose line of security appliances that, on introduction in the 2000s, succeeded various functions that Cisco previously offered in standalone form, including firewalls, intrusion prevention and virtual private networking. It remains well in use to this day, particularly among small to medium-sized enterprises (SMEs).
The alert stems from two distinct flaws in the technology – CVE-2025-20333, enabling remote code execution (RCE), and CVE-2025-20362, enabling elevation of privileges (EoP). A third arbitrary code execution vulnerability, CVE-2025-20363, has also been identified but is not in the scope of this specific alert.
Cisco said the issues impact Cisco ASA 5500-X Series models running Cisco ASA Software Release 9.12 or 9.14 with VPN web services enabled. The specific models involved are 5512-X, 5515-X, 5525-X, 5545-X, 5555-X and 5585-X, some of which reached end-of-life status in 2017. Two of them, 5512-X and 5515-X have been out of support since 2022.
The National Cyber Security Centre (NCSC) strongly recommended, where practicable, that ASA models falling out of support over the next 12 months should be replaced, noting the significant risks that obsolete, end-of-life hardware can pose.
“It is critical for organisations to take note of the recommended actions highlighted … particularly on detection and remediation,” said NCSC chief technology officer Ollie Whitehouse.
“We strongly encourage network defenders to follow vendor best practices and engage with the NCSC’s malware analysis report to assist with their investigations.
“End-of-life technology presents a significant risk for organisations. Systems and devices should be promptly migrated to modern versions to address vulnerabilities and strengthen resilience,” he said.
In an emergency directive issued prior to the weekend of 27-28 September, the US Cybersecurity and Infrastructure Security Agency (CISA) directed all users within the American government to account for and update Cisco ASA devices, and Cisco Firepower devices, which are also affected.
CISA supported the NCSC’s warning, saying that if ASA hardware models with an end-of-support date falling on or before Tuesday 30 September 2025 are found, these should be permanently disconnected immediately.
“These legacy platforms [and/or] releases cannot meet current vendor support and update requirements,” said CISA.
What’s the problem?
According to Cisco, the latest vulnerabilities are being exploited by the threat actor behind the ArcaneDoor campaign, which first came to light in April 2024 and is thought to have been the work of a nation state-backed threat actor.
This activity is thought to date back a few months prior to that, with Cisco’s Talos threat intel unit having identified attacker-controlled infrastructure active in November 2023, and possible test and development activity for previous exploits in July of that year.
Cisco said it had been working with multiple affected customers, including government agencies, on investigating the latest series of attacks for some time. It described the attacks as complex and sophisticated, requiring an extensive response, and added that the threat actor was still actively scanning for targets of interest.
The campaign has been linked to two different malwares, named Line Dancer and Line Runner, which were the subject of alerts in 2024.
Line Dancer, a shellcode loader, and Line Runner, a Lua webshell, work in tandem to enable the threat actors to achieve their objectives on ASA devices.
Tech
This Jackery Power Station Can Save You in an Emergency, and It’s on Sale for $199
Here in the Pacific Northwest, we’re heading into the cold and windy season, which generally means power outages. One of the best ways to stay prepared for those cold and dark days is a portable power station like the Jackery Explorer 300 Plus, which is currently marked down by $100 at Best Buy and by the same amount at B&H. It’s compact enough to tuck away in a cabinet for a rainy day, but still has enough juice to power small and medium sized devices.
I actually picked up one of these a few weeks ago ahead of a big windstorm, and although I fortunately didn’t have to use it, I did run some quick tests on it to make sure everything was in working order. Every device I connected to the Jackery started charging at its fastest rate instantly, and I plugged my router in as well, which happily ran off the outlet with no issue. While I didn’t get a chance to drain the battery, it has a 288-watt-hour capacity that’s excellent for many charges of smaller devices like phones and tablets, or hours of use keeping your small appliances awake.
It has a raft of ports for charging and powering your various devices. There’s a regular USB-A port with a 15W max for incidentals, plus two USB-C ports with a 100W max, one of which is also used as the input to charge the power station. There’s a traditional American 120V outlet too, with a 300W limit, in case the lower wattage USB ports don’t quite fit the bill for your most demanding equipment. There’s even a charger of the style you find in cars, in case you have accessories that need it.
If you’re worried the Explorer 300 Plus won’t have enough juice to get you through a long outage, or you’re a frequent road tripper, I also spotted several Jackery solar panels marked down at Best Buy. The smaller 40W solar panel is marked down to $79 from $130, and the larger 100W version is discounted down to $198 from $299. While this smaller model is great for individuals and occasional use, make sure to check out our other favorite portable power stations for bigger batteries.
Tech
Former USDS Leaders Launch Tech Reform Project to Fix What DOGE Broke
The past year has been traumatic for many of the volunteer tech warriors of what was once called the United States Digital Service (USDS). The team’s former coders, designers, and UX experts have watched in horror as Donald Trump rebranded the service as DOGE, effectively forced out its staff, and employed a strike force of young and reckless engineers to dismantle government agencies under the guise of eliminating fraud. But one aspect of the Trump initiative triggered envy in tech reformers: the Trump administration’s fearlessness in upending generations of cruft and inertia in government services. What if government leaders actually used that decisiveness and clout in service of the people instead of following the murky agendas of Donald Trump or DOGE maestro Elon Musk?
A small though influential team is proposing to answer that exact question, working on a solution they hope to deploy during the next Democratic administration. The initiative is called Tech Viaduct, and its goal is to create a complete plan to reboot how the US delivers services to citizens. The Viaduct cadre of experienced federal tech officials is in the process of cooking up specifics on how to remake the government, aiming to produce initial recommendations by the spring. By 2029, if a Democrat wins, it hopes to have its plan adopted by the White House.
Tech Viaduct’s advisory panel includes former Obama chief of staff and Biden’s secretary of Veterans Affairs Denis McDonough; Biden’s deputy CTO Alexander Macgillivray; Marina Nitze, former CTO of the VA; and Hillary Clinton campaign manager Robby Mook. But most attention-grabbing is its senior adviser and spiritual leader, Mikey Dickerson, the crusty former Google engineer who was the first leader of USDS. His hands-on ethic and unfiltered distaste for bureaucracy embodied the spirit of Obama’s tech surge. No one is more familiar with how government tech services fail American citizens than Dickerson. And no one is more disgusted with the various ways they have fallen short.
Dickerson himself unwittingly put the Viaduct project in motion last April. He was packing up the contents of his DC-area condo to move as far away as possible from the political scrum (to an abandoned sky observatory in a remote corner of Arizona) when McDonough suggested he meet with Mook. When the two got together, they bemoaned the DOGE initiative but agreed that the impulse to shred the dysfunctional system and start over was a good one. “The basic idea is that it’s too hard to get things done,” says Dickerson. “They’re not wrong about that.” He admits that Democrats had blown a big opportunity “For 10 years we’ve had tiny wins here and there but never terraformed the whole ecosystem,” Dickerson says. “What would that look like?”
Dickerson was surprised a few months later when Mook called him to say he found funding from Searchlight Institute, a liberal think tank devoted to novel policy initiatives, to get the idea off the ground. (A Searchlight spokesperson says that the think tank is budgeting $1 million for the project.) Dickerson, like Al Pacino in Godfather III, was pulled back in. Ironically, it was Trump’s reckless-abandon approach to government that convinced him that change was possible. “When I was there, we were severely outgunned, 200 people running around trying to improve websites,” he says. “Trump has knocked over all the beehives—the beltway bandits, the contractor industrial complex, the union industrial complex.”
Tech Viaduct has two aims. The first is to produce a master plan to remake government services—establishing an unbiased procurement process, creating a merit-based hiring process, and assuring oversight to make sure things don’t go awry. (Welcome back, inspector generals!) The idea is to design signature-ready executive orders and legislative drafts that will guide the recruiting strategy for a revitalized civil service. In the next few months, the group plans to devise and test a framework that could be executed immediately in 2029, without any momentum-killing consensus building. In Viaduct’s vision that consensus will be achieved before the election. “Thinking up bright ideas is going to be the easy part,“ Dickerson says. “As hard as we’re going to work in the next three to six months, we’re going to have to spend another two to three years, through a primary season and through an election, advocating as if we were a lobbying group.”
Tech
Why Everyone Is Suddenly in a ‘Very Chinese Time’ in Their Lives
In case you didn’t get the memo, everyone is feeling very Chinese these days. Across social media, people are proclaiming that “You met me at a very Chinese time of my life,” while performing stereotypically Chinese-coded activities like eating dim sum or wearing the viral Adidas Chinese jacket. The trend blew up so much in recent weeks that celebrities like comedian Jimmy O Yang and influencer Hasan Piker even got in on it. It has now evolved into variations like “Chinamaxxing” (acting increasingly more Chinese) and “u will turn Chinese tomorrow” (a kind of affirmation or blessing).
It’s hard to quantify a zeitgeist, but here at WIRED, chronically online people like us have been noticing a distinct vibe shift when it comes to China over the past year. Despite all of the tariffs, export controls, and anti-China rhetoric, many people in the United States, especially younger generations, have fallen in love with Chinese technology, Chinese brands, Chinese cities, and are overall consuming more Chinese-made products than ever before. In a sense the only logical thing left to do was to literally become Chinese.
“It has occurred to me that a lot of you guys have not come to terms with your newfound Chinese identity,” the influencer Chao Ban joked in a TikTok video that has racked up over 340,000 likes. “Let me just ask you this: Aren’t you scrolling on this Chinese app, probably on a Chinese made phone, wearing clothes that are made in China, collecting dolls that are from China?”
Everything Is China
As is often the case with Western narratives about China, these memes are not really meant to paint an accurate picture of life in the country. Instead, they function as a projection of “all of the undesirable aspects of American life—or the decay of the American dream,” says Tianyu Fang, a PhD researcher at Harvard who studies science and technology in China.
At a moment when America’s infrastructure is crumbling and once-unthinkable forms of state violence are being normalized, China is starting to look pretty good in contrast. “When people say it’s the Chinese century, part of that is this ironic defeat,” says Fang.
As the Trump administration remade the US government in its own image and smashed long-standing democratic norms, people started yearning for an alternative role model, and they found a pretty good one in China. With its awe-inspiring skylines and abundant high-speed trains, the country serves as a symbol of the earnest and urgent desire among many Americans for something completely different from their own realities.
Critics frequently point to China’s massive clean energy investments to highlight America’s climate policy failures, or they point to its urban infrastructure development to shame the US housing shortage. These narratives tend to emphasize China’s strengths while sidelining the uglier facets of its development—but that selectivity is the point. China is being used less as a real place than as an abstraction, a way of exposing America’s own shortcomings. As writer Minh Tran observed in a recent Substack post, “In the twilight of the American empire, our Orientalism is not a patronizing one, but an aspirational one.”
Part of why China is on everyone’s mind is that it’s become totally unavoidable. No matter where you live in the world, you are likely going to be surrounded by things made in China. Here at WIRED, we’ve been documenting that exhaustively: Your phone or laptop or robot vacuum is made in China; your favorite AI slop joke is made in China; Labubu, the world’s most coveted toy, is made in China; the solar panels powering the Global South are made in China; the world’s best-selling EV brand, which officially overtook Tesla last year, is made in China. Even the most-talked about open-source AI model is from China. All of these examples are why this newsletter is called Made in China.
-
Tech4 days agoNew Proposed Legislation Would Let Self-Driving Cars Operate in New York State
-
Sports6 days agoClock is ticking for Frank at Spurs, with dwindling evidence he deserves extra time
-
Business1 week agoTrump moves to ban home purchases by institutional investors
-
Sports7 days ago
Commanders go young, promote David Blough to be offensive coordinator
-
Fashion6 days agoSouth India cotton yarn gains but market unease over US tariff fears
-
Fashion6 days agoChina’s central bank conducts $157-bn outright reverse repo operation
-
Entertainment3 days agoX (formerly Twitter) recovers after brief global outage affects thousands
-
Sports6 days agoUS figure skating power couple makes history with record breaking seventh national championship
