Menu
Cisco advises users to lock down WebEx to prevent snooping

Cisco advises users to lock down WebEx to prevent snooping

A security researcher found potentially sensitive meetings open for anyone to join

Cisco has warned customers to lock down WebEx after a security researcher and journalist found many big-name companies left some online meetings open for anyone to join.

Brian Krebs wrote on his blog that he found companies and organizations that failed to password protect WebEx meetings, which allowed "anyone to join daily meetings about apparently internal discussions and planning sessions."

Meeting schedules for organizations were available through WebEx's "Event Center," he wrote.

Cisco has a variety of options for WebEx that are intended to accommodate sensitive meetings and ones intended for the public.

For example, Cisco requires a password to be set by default for a meeting, but that option can be turned off, wrote Aaron Lewis, who works in global social media marketing, on a company blog.

"The most secure meetings will always be protected by a complex password," Lewis wrote.

Companies may publicly list a meeting for webinars that anyone can join, but "if your WebEx site administrator or IT department allows listed meetings, then we recommend listing your meeting only if there is a true business reason," Lewis wrote.

Another tip is to disable the option "join before host," which will then give the host visibility on who has joined. Also, setting the "host as presenter" prevents someone else form joining the meeting and sharing content, Lewis wrote.

Krebs wrote he found meetings not protected by a password from a host of companies and organizations, including Charles Schwab, CSC, CBS, CVS, The U.S. Department of Energy, Fannie Mae, Jones Day, Orbitz, Paychex Services and Union Pacific.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securitycisco

Featured

Slideshows

Ingram Micro maintains Showcase 2018 momentum in Wellington

Ingram Micro maintains Showcase 2018 momentum in Wellington

Ingram Micro maintained Showcase 2018 momentum in Wellington, hosting more than 40 vendors at TSB Arena. Under the banner of Leading the Way, the event demonstrated what’s new, what’s next and how it can be used to improve business and everyday life.

Ingram Micro maintains Showcase 2018 momentum in Wellington
Ingram Micro launches Showcase 2018 in Christchurch

Ingram Micro launches Showcase 2018 in Christchurch

Ingram Micro kickstarted Showcase 2018 in Christchurch, hosting more than 40 vendors at Horncastle Arena. Under the banner of Leading the Way, the event demonstrated what’s new, what’s next and how it can be used to improve business and everyday life.

Ingram Micro launches Showcase 2018 in Christchurch
Data breach notification laws in NZ: How can partners prepare?

Data breach notification laws in NZ: How can partners prepare?

This exclusive Reseller News Roundtable outlined the responsibilities facing security partners today, assessing risk while evaluating the role of the vendor in providing added layers of protection.

Data breach notification laws in NZ: How can partners prepare?
Show Comments