Cisco has disclosed a significant security vulnerability in its Webex Meetings platform that allowed unauthorized access to meeting information and metadata.
The issue, identified in early May 2024, affected certain customers hosted in Cisco’s Frankfurt data center.
The vulnerability was discovered during targeted security research activities. It enabled unauthorized access to sensitive meeting details, potentially risking the confidentiality and integrity of the affected meetings.
Cisco has since addressed the bugs and implemented a fix worldwide as of May 28, 2024.
The security flaw was found in the Cisco Webex Meetings platform, which is widely used for virtual meetings and collaboration.
The vulnerability allowed unauthorized parties to access meeting information and metadata, including details such as meeting times, participants, and potentially sensitive discussions.
With ANYRUN You can Analyze any URL, Files & Email for Malicious Activity : Start your Analysis
Cisco has taken swift action to mitigate the issue. The company has notified affected customers and confirmed that no further unauthorized attempts to access meeting data have been observed since the fix was implemented.
Cisco continues to monitor for any unauthorized activity and conducts an ongoing investigation to ensure the security of its platform.
Cisco advises Webex Meetings customers to stay vigilant and monitor regular support channels for further communication. The company has also provided a detailed list of security recommendations for Webex Meeting hosts and administrators to enhance security measures.
Cisco is committed to working with the security community to enhance industry-wide security standards.
The company encourages users to engage with its support channels for any further questions or concerns regarding the security of their Webex Meetings.
The Cisco Security Vulnerability Policy provides more detailed information on the security recommendations and Cisco’s vulnerability disclosure policies.
Cisco Webex Meetings customers are encouraged to follow the official communication channels provided by Cisco for further updates and detailed security recommendations.
Looking for Full Data Breach Protection? Try Cynet's All-in-One Cybersecurity Platform for MSPs: Try Free Demo
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…
Hackers are making some phishing pages harder to track by changing the code delivered to…
A cyber incident reportedly forced a British power plant to halt operations for about four…
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…
TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…
A fake student resume is being used to place a remote-access tool on researchers’ Windows…