Cyber Risks · Krebs on Security

Who’s Watching Your Web Ex?

Summary: KrebsOnSecurity worked with Cisco to alert more than four dozen companies, including Charles Schwab, CVS, the U.S. Department of Energy, Fannie Mae and Union Pacific, that their recurring WebEx meetings lacked passwords and could be joined by anyone. Cisco said its default is to include a password on new meetings, and that a meeting found online without one means the site administrator or meeting creator chose to omit it.

Why it matters: Cisco's own incident manager confirmed that a site administrator can switch off password requirements for an entire WebEx site, which turns a single configuration choice into an open door for every recurring meeting on it.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related