Cisco discloses data breach impacting Cisco.com user accounts

From bleepingcomputer.com

Cisco has disclosed that cybercriminals stole the basic profile information of users registered on Cisco.com following a voice phishing (vishing) attack that targeted a company representative.

After becoming aware of the incident on July 24th, the networking equipment giant discovered that the attacker tricked an employee and gained access to a third-party cloud-based Customer Relationship Management (CRM) system used by Cisco.

This allowed the threat actor to steal the personal and user information of individuals with Cisco.com user accounts, including names, organization names, addresses, Cisco-assigned user IDs, email addresses, phone numbers, and account metadata such as creation dates.
. . .

Comment! It's anonymous!

2 replies (most recent on top)

It was a social engineering voice-phishing-attack. A cybercriminal tricked a Cisco representative into granting them access to steal the personal information of Cisco.com users.

Here’s a revised version that keeps the message clear while maintaining anonymity and professionalism:

We’ve repeatedly encountered a pattern where developers—particularly from Chinese teams—check in ServiceNow credentials into repositories despite ongoing reminders and callouts to stop. The priority seems to be speed over security. When expectations for better standards are enforced, communication often drops off entirely. Mix and repeat across the entire codebase I can’t imagine how we bill ourselves as a software and security company. We serve only as a warning to others that speed (and cheap costs) come at a price of poor quality and lapsed security.

Thread regarding Cisco Systems Inc. layoffs

Cisco discloses data breach impacting Cisco.com user accounts

2 replies (most recent on top)

Post a reply