On July 24, 2025, Cisco learned of a vishing attack aimed at one of its representatives, allowing a bad actor to access basic profile information from a third-party CRM system.
Upon learning of the incident, the actor’s access to that CRM system instance was immediately terminated and Cisco commenced an investigation.
By infosecbulletin
/ Saturday , November 14 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Friday , November 13 2026
The Latvian part of CSCTelecom, Â a telecommunications provider, made a database with over 125 million SMS messages public. The leaked...
Read More
By infosecbulletin
/ Friday , November 13 2026
Hackers used Check Point firewall flaws to get root access, insert backdoors, and install harmful malware on a VMware ESXi...
Read More
By infosecbulletin
/ Friday , November 13 2026
The United States Justice Department said Thursday it had seized cloud infrastructure used by North Korean hackers in a video-call...
Read More
By infosecbulletin
/ Wednesday , November 11 2026
Microsoft has shared its updates for November 2026. These updates fix 1,093 new flaws in Windows, Office, SQL Server, SharePoint,...
Read More
By infosecbulletin
/ Wednesday , November 11 2026
Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
By infosecbulletin
/ Tuesday , November 10 2026
IBM patched 208 security flaws in its API Connect platform. The CVE records released out on November 7, 2026. Among...
Read More
The investigation found that the exported data mainly included basic profile information of users who registered on Cisco.com, such as name, organization, address, user ID, email, phone number, and account creation date.
The actor did not obtain any of our organizational customers’ confidential or proprietary information, or any passwords or other types of sensitive information. Cisco did not identify any impact to our products or services, and no other Cisco CRM instances were affected.
“We are implementing further security measures to mitigate the risk of similar incidents occurring in the future, including re-educating personnel on how to identify and protect against potential vishing attacks.”
Cisco has not shared how many people’s information was stolen or if the attackers asked for a ransom. Cisco has engaged with data protection authorities and notified affected users where required by law.
In October, Cisco also had to take its public
DevHub portal offline after a threat actor known as IntelBroker leaked “non-public” data on the BreachForums hacking forum.
Cloud intrusions surged 136% H1 of 2025
InfoSecBulletin Cybersecurity for mankind
