Cisco
-
Blog
Chinese hackers breach more US telecoms via unpatched Cisco routers
China’s Salt Typhoon hackers are still actively targeting telecoms worldwide and have breached more U.S. telecommunications providers via unpatched Cisco IOS XE network devices. Recorded Future’s Insikt Group threat research division states that the Chinese hacking group (tracked Salt Typhoon and RedMike) has exploited the CVE-2023-20198 privilege escalation and CVE-2023-20273 Web UI command injection vulnerabilities. These ongoing attacks have already…
Read More » -
Blog
‘Divorced from reality’: HPE slams DOJ over bid to block Juniper deal, claims move will benefit Cisco
HPE has hit out at the US Department of Justice (DOJ) over its attempt to block the acquisition of Juniper Networks, suggesting the move is “divorced from reality” and will benefit competitors in the space. HPE bid $14 billion for Juniper Networks in January 2024, with the deal seen as a play by the networking giant to take advantage of…
Read More » -
Blog
Cisco polishes its platform but the network is still king
Last year, Cisco Live 2024 was my first proper introduction to the company in all its glory and if I’m honest I was somewhat overwhelmed by its scale and breadth. Fortunately for me, the overriding theme in Amsterdam that year was tightly focused on unifying Cisco’s byzantine product ecosystem under one integrated platform. In 2024, the firm’s foremost storyteller Jeetu…
Read More » -
Blog
Cisco claims new smart switches provide next-level perimeter defense
Cisco’s ‘security everywhere’ mantra has just taken on new meaning with the launch of a series of smart network switches it says will redefine the way firewalls, the old stalwart of cybersecurity, work entirely. Unveiled at Cisco Live in Amsterdam, Cisco said its N9300 Smart Switches will introduce new capabilities to help businesses defuse some of the lateral movement techniques…
Read More » -
Blog
Cisco is jailbreaking AI models so you don’t have to worry about it
Cisco has launched a new AI Defense security solution it says covers the entire range of potential LLM security threats to help businesses implement generative AI across their organization with confidence. As firms rush to deploy generative AI tools, be that through internally developed models, customized APIs, or external applications, they significantly increase their attack surface – and Cisco is…
Read More » -
Blog
Cisco wants to capitalize on the ‘DeepSeek effect’
DeepSeek’s shock introduction has had a massive effect on the adoption and development of generative AI models in the business landscape, and Cisco feels it has a significant advantage in capitalizing on this. Speaking at Cisco Live 2025, its annual EMEA conference in Amsterdam, Jeetu Patel, EVP and chief product officer at Cisco said this is a massive opportunity for…
Read More » -
Blog
Cisco dispels Kraken data breach claims, insists stolen data came from old attack
Cisco has pushed back on claims it has been breached in a new ransomware attack after a threat actor exposed sensitive information allegedly stolen from the firm’s internal network. The Kraken ransomware group posted the information, which according to reporting by Cyber Press contained credentials linked to Cisco’s Windows Active Directory environment, to its dark web leak site. This data…
Read More » -
Blog
Cisco patches critical flaws in Identity Services Engine
Cisco has rolled out software updates to address a pair of critical vulnerabilities in its Identity Services Engine (ISE) that could let hackers take over devices and access data. The flaws affect Cisco ISE and Cisco ISE Passive Identity Connector, versions 3.0 to 3.3, but not 3.4. A workaround is not possible, so a software upgrade is required. Cisco said…
Read More » -
Blog
Cisco warns of denial of service flaw with PoC exploit code
Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused by a heap-based buffer overflow weakness in the Object Linking and Embedding 2 (OLE2) decryption routine, allowing unauthenticated, remote attackers to trigger a DoS condition on vulnerable devices. If this vulnerability is successfully exploited, it…
Read More » -
Blog
IntelBroker leaks 2.9 TB of exposed Cisco records – and there’s more to come
Hackers have published data claimed to have been stolen from a Cisco developer resource, after an alleged misconfiguration left software artifacts available on the public internet. A well known threat actor has leaked 2.9 TB of data on the dark web, said to be part of a larger 4.5TB dataset, following up on their claims to have found an unprotected…
Read More »