Security News > 2020 > June > Cisco Adds New Security Features to Webex, Patches Serious Vulnerabilities
Cisco announced this week that it has added new security features to Webex and that it has also patched several high-severity vulnerabilities in the conferencing product.
At its Cisco Live 2020 event, the networking giant informed customers that it has extended its data loss prevention retention, Legal Hold and eDiscovery features to Webex Meetings.
The company has also published several security advisories this week for Webex vulnerabilities, including three that have been classified as high severity and one rated medium severity.
The Webex Meetings Desktop App for Mac is affected by a vulnerability that allows a remote attacker, without authentication, to execute arbitrary code on the targeted system by abusing the application's software update feature and convincing the victim to access a malicious website that serves files similar to the ones hosted on a legitimate Webex website.
"In an attack scenario, any malicious local user or malicious process running on a computer where WebEx Client for Windows is installed can monitor the memory mapped file for a login token. Once found the token, like any leaked credentials, can be transmitted somewhere so that it can be used to login to the WebEx account in question, download Recordings, view/edit Meetings, etc," Trustwave said in a blog post.
News URL
Related news
- Ivanti vows to transform its security operating model, reveals new vulnerabilities (source)
- OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories (source)
- Cisco creates architecture to improve security and sell you new switches (source)
- Governments issue alerts after 'sophisticated' state-backed actor found exploiting flaws in Cisco security boxes (source)
- State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage (source)
- BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023 (source)
- Cisco’s Splunk Acquisition Should Help Security Pros See Threats Sooner in Australia and New Zealand (source)