Boletines de Vulnerabilidades

Cisco Event Response: Vishing Attack Impacting Third-Party CRM System

   
Software afectado Cisco
 
On July 24, 2025 (GMT+9), Cisco was made aware of an incident involving a bad actor targeting a Cisco representative through a voice phishing attack, also known as vishing. As a result, the actor was able to access and export a subset of basic profile information from one instance of a third-party, cloud-based Customer Relationship Management (CRM) system that Cisco uses. Security Impact Rating: Critical CVE: CVE

More info:

https://sec.cloudapps.cisco.com/security/center/resources/CRM-vishing?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Event%20Response:%20Vishing%20Attack%20Impacting%20Third-Party%20CRM%20System%26vs_k=1