
SWN #291 - Clop, EvalPhP, VMWare, Google, Fancy Bear, Routers, 3CX, Aaran Leyland, and More
Security Weekly News (Audio)
00:00
Cisco Enable Password Encryption
If you have old Cisco stuff running and almost everybody uses it, be aware. In every single Cisco conf, if you have ever looked at a Cisco conf, it is a text file. Be careful, you will find right there in the conf in plain text are passwords and guess where those passwords are also used. Probably all over your company. ESET acquired 18 secondhand enterprise routers that were Cisco, Fortinet and Juniper and found nine of the 18 devices which included core routers from massive companies were still completely configured. Only five of them were actually wiped.
Transcript
Play full episode