Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits

A new attack campaign, dubbed Operation Zero Disco, exploits the Cisco SNMP vulnerability CVE-2025-20352 to deploy Linux rootkits on unprotected Cisco devices. The campaign targets Cisco 9400, 9300, and legacy 3750G series switches.