Cisco looking into source-code leak
An estimated 800MB of code may have been stolen
May 17, 2004 12:00 PM ETIDG News Service -
Cisco Systems Inc. is investigating the possible theft of proprietary source code that drives its networking hardware, a company representative confirmed today.
Russian security site SecurityLab.ru reported Saturday that the operating system code -- used to power a majority of the company's networking devices -- was stolen from Cisco's corporate network, with some leaked onto the Internet. The site estimated that around 800MB of code was taken.
"Cisco is aware that a potential compromise of proprietary information has occurred and was reported on a public Web site right before the weekend," Cisco spokesman Marc Musgrove said today. "The Cisco security team is looking into this matter and investigating what happened."
Musgrove declined to confirm how much of the company's code may have been stolen.
Since the leak has not yet been verified, it could turn out to be a hoax, said Chris Paget, senior security adviser at Next Generation Security Software Ltd. He pointed out that few people could actually identify the code.
However, if the code has been leaked, there is a potential for problems, since it affects most of Cisco's current, major equipment, Paget said.
The incident would mark the second time in recent months that a major vendor's source code has been leaked to the public. In February, code underlying Microsoft Corp.'s Windows NT and Windows 2000 operating systems was made available on the Internet. However, that breach didn't lead to any serious security threats.
Cisco has faced a number of potential security threats in recent months, including the release of a wireless hacking tool and hardware vulnerabilities, but experts say that attacks on networking products are relatively uncommon.
Reprinted with permission from
Story copyright 2009 International Data Group. All rights reserved.
Additional Resources


White Papers & Webcasts
Centralized Data Backup and Your WAN
Is your organization prepared to tackle the massive challenge of protecting your data in a cost effective and timely manner? With a growing...
Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...
An All-in-One Approach to Web Security
Granting web access to employees poses challenges to IT administrators and introduces unique security risks. Even as companies have perfected their security techniques...
Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...
The Hidden Dangers of Spam
Beyond the well-understood productivity drain that spam inflicts on businesses, threats posed by illicit email circulating through a network are causing many security...
Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...
Open Source Security Myths Dispelled
(Source: Astaro) Open Source Software is computer software whose source code is available to the general public. This openly viewable nature...
Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...
Best Practices for Backing Up VMware® with Veritas NetBackup™
VMware® is used by enterprises large and small to increase the efficiency and cost-effectiveness of their IT operations. With this in mind, Symantec...
Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...
Subscribe to Computerworld
