back to article Cisco: Hey, IT depts. You're all malware hosts

Everybody – at least every multinational that Cisco checked out for its 2014 Annual Security Report – is hosting malware of some kind, and there aren't enough security professionals to go around. Along with its Managed Threat Defense service launched this week, Cisco also launched the latest publication (here with registration …

COMMENTS

This topic is closed for new posts.
  1. Tom 35

    Abridged version

    Cisco: Buy our stuff.

    1. dogged

      Re: Abridged version

      (DISCLAIMER: I DO NOT WORK FOR CISCO OR ANY OF THEIR AFFILIATES)

      To be fair, Cisco stuff is pretty bloody good at what it does.

      1. Hit Snooze

        Re: Abridged version

        To be fair, Cisco stuff is pretty bloody good at what it does.

        I agree, it is very good, flexible, reliable, and there are tons of documentation/forums for Cisco equipment (major advantage), but it is expensive which really sucks.

      2. Trevor_Pott Gold badge

        Re: Abridged version

        "To be fair, Cisco stuff is pretty bloody good at what it does."

        Can't disagree, but for most areas of Cisco's endeavors, there are others that area as good that cost less. Really, that's the bit that matters.

  2. big_D Silver badge

    My thoughts too. Here is our new security product, oh and we just compiled a report that shows you have malware and don't know what is going on in your network.

  3. Anonymous Coward
    Anonymous Coward

    Is this the same Cisco...

    ... that had open email relays on their network for several months which accounted for a significant percentage of all spam being seen by spamcop?

  4. Captain Scarlet
    Coffee/keyboard

    Erm

    "Java is the undisputed king of endpoint vulnerabilities, Cisco claims"

    Cisco Desktop desktop apps are mostly built in java, our Cisco phones have java runtime on them and pretty sure the backend servers must have at least some java in them.

    I wonder if they will move away from Java usage?

  5. Peter2 Silver badge

    100% of IT Depts they tested were probably Cisco customers using Cisco VOIP phones that seemingly require a server to be connected to the network, but not managed, patched, firewalled or otherwise managed by IT.

    . . . Which is why I don't have a Cisco telephone system.

    1. Hit Snooze

      100% of IT Depts they tested were probably Cisco customers using Cisco VOIP phones that seemingly require a server to be connected to the network, but not managed, patched, firewalled or otherwise managed by IT

      Each business chooses who will manage their VOIP systems, and IT has always managed VOIP in every place of business that I have worked for. So your complaint is invalid.

      Also, Cisco has a very good VOIP system that is easy to patch, manage, and is rock solid.

  6. NileH

    Anyone who thinks that IT security is a priority should take a look at the job adverts dotted around the content you're reading right now.

    If you've got the Technojobs ad, it'll reflect the current contents of the page - IT security - and it'll have three or four 'Information Security Analyst' vacancies at £35-45k, and one or two security consultant or senior manager roles at £65-75k.

    That's OK for IT, but not exactly stellar. It's *way* less than the banks are paying programmers who write the security vulnerabilities, and it doen't sound like the pay rate for doing something particularly difficult, or critical to the company's success.

    And Cisco? It's nice that they've woken up to the commercial case for security. But I doubt that the firmware and embedded systems in their hardware is anywhere near secure, and I am certain that every single router on sale today, from every company, everywhere, has a backdoor waiting to be discovered.

This topic is closed for new posts.

Other stories you might like