Do Son A China-linked APT, UAT-6382, is actively exploiting a zero-day (CVE-2025-0994) in Cityworks to gain RCE and persistent access to government and utility systems.
Cityworks
Take action now to secure your systems from CVE-2025-0994, a critical deserialization vulnerability in Trimble's Cityworks software.