AnyConnect flaw that Cisco patched two years ago was actually exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday (10/24) included two security vulnerabilities CVE-2020-3433 and CVE-2020-3153 patched by Cisco in 2020 into the The Known Exploited Vulnerabilities directory shows that the two security flaws involving AnyConnect Secure Mobility were actually exploited by hackers. Cisco also updated the description of the two vulnerabilities at the same time.