Cisco Suffered a Cyber Attack: Security Vulnerability Raises Concerns

Critical Security Vulnerability Announcement from Cisco

HANDE BERKTAN

The American technology giant Cisco announced that it has been targeted by a cyber attack conducted by Chinese hackers. The company stated that a critical security vulnerability present in some of its most popular products was exploited.

Targeted Products and Attack Details

Cisco reported that the attack specifically targeted Cisco AsyncOS software, affecting both Cisco Secure Email Gateway and Cisco Secure Email and Web Manager physical and virtual devices. Michael Taggart, a Senior Cybersecurity Researcher at UCLA Health Sciences, stated, “The requirement for an internet-connected management interface and certain features to be enabled will limit the attack surface for this vulnerability.”

Security Breach and Large Organizations

Security Researcher Kevin Beaumont emphasized that this attack is particularly concerning. The fact that affected products are widely used by many large organizations, the absence of existing patches, and uncertainties over whether hackers have established backdoors in the affected systems exacerbate the situation.

Cisco's Statement and Investigations

Cisco has not provided information on how many customers' data has been stolen. Company spokesperson Meredith Corley announced that the issue is being actively investigated and a permanent solution will be developed.