Cisco looking into source-code leak
An estimated 800MB of code may have been stolen
May 17, 2004 12:00 PM ETIDG News Service -
Cisco Systems Inc. is investigating the possible theft of proprietary source code that drives its networking hardware, a company representative confirmed today.
Russian security site SecurityLab.ru reported Saturday that the operating system code -- used to power a majority of the company's networking devices -- was stolen from Cisco's corporate network, with some leaked onto the Internet. The site estimated that around 800MB of code was taken.
"Cisco is aware that a potential compromise of proprietary information has occurred and was reported on a public Web site right before the weekend," Cisco spokesman Marc Musgrove said today. "The Cisco security team is looking into this matter and investigating what happened."
Musgrove declined to confirm how much of the company's code may have been stolen.
Since the leak has not yet been verified, it could turn out to be a hoax, said Chris Paget, senior security adviser at Next Generation Security Software Ltd. He pointed out that few people could actually identify the code.
However, if the code has been leaked, there is a potential for problems, since it affects most of Cisco's current, major equipment, Paget said.
The incident would mark the second time in recent months that a major vendor's source code has been leaked to the public. In February, code underlying Microsoft Corp.'s Windows NT and Windows 2000 operating systems was made available on the Internet. However, that breach didn't lead to any serious security threats.
Cisco has faced a number of potential security threats in recent months, including the release of a wireless hacking tool and hardware vulnerabilities, but experts say that attacks on networking products are relatively uncommon.
Reprinted with permission from
Story copyright 2009 International Data Group. All rights reserved.
Security
Additional Resources



White Papers & Webcasts
The State of PCI DSS Compliance at Organizations Today
Download this resource today!
Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...
Can Heuristic Technology Help Your Company Fight Viruses?
What is Heuristic Technology and how can it help safeguard your business against viruses? Learn more.
Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.
Why Email Must Operate 24/7 and How to Make This Happen
Learn how to avoid an email outage by implementing a hosted email continuity solution.
Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!
Eradicate Spam & Gain 100% Asurance of Clean Mailboxes
Get this paper now!
Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!
Mastering eDiscovery: The IT Manager's Guide to Preservation, Protection & Production
Get this paper now!
Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...
