Security News
Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.
The vulnerability that allowed a German journalist to discover links to video conference meetings held by Bundeswehr and the Social Democratic Party of Germany via their self-hosted Cisco Webex instances similarly affected the Webex cloud service. "The cause of the vulnerability is again Cisco does not use random numbers to assign numbers used for meetings," Netzbegrünung explained.
Roderich Kiesewetter, deputy chairman of the German parliament's oversight committee, said the Bundeswehr leak was possibly caused by a Russian agent inside the WebEx call or the Bundeswehr's implementation of it, but the country is still working on discovering how the intrusion took place. RT has since made a number of claims after publishing the call, including that the conversation provides proof that Germany was planning to help Ukraine to destroy the Kerch Bridge that connects Russia to the illegally annexed Crimea.
Threat actors use Google Ads tracking templates as a loophole to create convincing Webex software search ads that redirect users to websites that distribute the BatLoader malware. Malwarebytes reports that a malicious Google ad impersonates the official Webex download portal, ranking at the highest position in Google Search results for the "Webex" term.
Boffins at two US universities have found that muting popular native video-conferencing apps fails to disable device microphones - and that these apps have the ability to access audio data when muted, or actually do so. One app transmits statistics of the audio to its telemetry servers while the app is muted.
Cisco unveiled an all-new Webex Suite with innovations to serve as the foundation for inclusive hybrid work and events, delivering unmatched levels of flexibility and personalization for everyone. "The all-new Webex Suite ensures everyone in a hybrid workforce has equal opportunity and voice."
Enterprise security vendor Cisco has shipped fixes for a wide range of severity vulnerabilities, including patches for high-risk flaws in the widely deployed Webex Player, SD-WAN software, and ASR 5000 series software. A total of three high-severity vulnerabilities were patched in Webex Player for Windows and macOS, two of which also affect the Webex Network Recording Player for those operating systems.
At its Cisco Live conference this week, the company announced everything from a redesign of its internet infrastructure to a new network-as-a-service offering. Cisco announced plans to help communication service providers and web-scale companies strengthen their networks.
To help people work smarter, combat burnout and drive more inclusive work experiences, Cisco Webex announced advancements to the People Insights feature. "These insights enable a more inclusive work experience and empowers our people to develop and leverage their collective collaboration network, while helping leaders act at the intersection of performance, empathy, and service to others to build connected and effective teams."
A man has been sentenced to two years in jail after being convicted of hacking Cisco's Webex collaboration platform in an insider-threat case brought to the U.S. District Court in California. As a result, 16,000 WebEx Teams accounts were shut down for up to two weeks; and, the incident cost Cisco about $1.4 million in remediation costs, including refunding $1 million to affected customers, according to a court announcement.