Thread regarding Cisco Systems Inc. layoffs

Senator presses Cisco over firewall flaws that burned US agency

Chuckie is in hot water, expecting federal government agencies to remove Cisco equipment

US Senator Bill Cassidy has fired off a pointed letter to Cisco over the firewall flaws that allegedly let hackers breach "at least one federal agency."

Cassidy's letter [PDF] to Cisco CEO Chuck Robbins demands clarity around the company's knowledge of and response to the critical flaws – namely CVE-2025-20333 and CVE-2025-20362 – that prompted the US government to issue an emergency patching directive for federal civilian agencies.

Cassidy says "at least one federal agency has already been breached as a result of this vulnerability," a claim Cisco has not publicly confirmed or denied.


by
| 2563 views | | 13 replies (last October 21) | Reply
Post ID: @OP+1k7tr4qx4

13 replies (most recent on top)

Anyone keeping end of support devices in their production network has already sealed their fate. You have decided to be unable to patch a vulnerability if/when found. Companies cant be expected to maintain code trains forever.

by
| | Reply
Post ID: @v2+1k7tr4qx4

@cn

sigh...how do you not understand how the security game works? Hackers find exploits, and vendors patch them. It's an endless cycle. It seems you have a childlike grasp on the subject.

The Senator's letter is not looking to find fault. Clearly you have assigned fault, so there's not much point in writing this. I'm bored, so I'll continue. It's just a question of whether or not Cisco followed security standards and implemented fixes for known vulnerabilities. Given three factors: there were two new vulnerabilities identified as disclosed in the public notices, the vulnerabilities are complex in nature, and the hackers are a state-sponsored entity (not some amateur goofball group), it's hard to blame Cisco.

You should also assume that the US Gov't has its own division of hackers that try to break the gear they buy from any vendor, which also means the US gov't hackers didn't find these exploits.

These hacks will never stop; they will get increasingly more complex. The senator's letter is ultimately seeking partnership, not blame.

When the gov't is looking for blame, they come after you with a lawsuit - like when a company lies about implementing security fixes in products purchased by the gov't. That's not the case here.

by
| | Reply
Post ID: @mg+1k7tr4qx4

Cisco makes low quality cr-p these days. The days when customer paid top $$$ for top quality are long gone. Today they still pay top $$ and expensive subscriptions for a ton of buggy sh-t.

by
| | Reply
Post ID: @hg+1k7tr4qx4

The US is divesting Cisco as is Canadian federal.

by
| | Reply
Post ID: @g9+1k7tr4qx4

"That's what happens when they hire young inexperience folks at a higher salary for less quality work. They want to deliver as quickly as possible cause Friday's are video game days."

I saw that happen at Lenovo (before the pandemic). A young guy who brown nosed his way up, would never show up before 10:00AM (sometimes he left early in the afternoon on Fridays). The manager wanted us at our desks at 9:00AM, but guess what time the manager stopped by to check on us? 10:00AM of course.

Another guy who was hired, just surfed the web all day. Even other people in that department sitting near him asked, "Does that guy do any work? What's he getting paid for?".

Lots of big corporations play the favorites game, especially with younger employees/ new hires.

by
| | Reply
Post ID: @g4+1k7tr4qx4

@d1 get a life, anyone is welcome to hangout on this site, I’m NOT @an

W.T.

by
| | Reply
Post ID: @d5+1k7tr4qx4

@an you are no longer an employee and STILL hang out on this site? Luzr, move on

by
| | Reply
Post ID: @d1+1k7tr4qx4

@bk

For q's 1-3: Read the security bulletin
4: If those Agencies bought the right services, sure Cisco will be assisting. If not, sorry, shoulda bought the right services.
5: Here's a white paper

nothing controversial or arguably even interesting...except the possibility of more federal agencies buying more Professional Services from Cisco.

It's really not the gotcha that media and NPCs here are hoping for.

by
| | Reply
Post ID: @cj+1k7tr4qx4

The fact that the Senator's actual questions are omitted from most of the articles and this thread is the clue that it's meaningless. For the lazy, here's the source and the q's the Senator would like answered:

https://www.help.senate.gov/imo/media/doc/bc_letter_to_cisco_on_cybersecurity.pdf

--
As Cisco works with the federal government to patch any cybersecurity vulnerabilities, it must work with these stakeholders to ensure their systems are protected as well. To that end, I request answers to the following questions by October 27, 2025:

  1. Has Cisco identified any specific threats to individual customers? If so, how is it
    communicating next steps or security patches?

  2. How is Cisco proactively communicating with customers as Cisco identifies more about
    the potential threat?

  3. Is Cisco currently recommending that individual customers disconnect or upgrade end-of-support devices as CISA directed federal agencies do on September 25?

  4. How is Cisco engaging with specific federal agencies, including the Departments of
    Education, Labor, and Health and Human Services to provide sector-specific services or
    assistance to impacted entities?

  5. Estimates are that 45% of companies in the United States do not employ a Chief
    Information Security Officer (CISO). How is Cisco working to communicate with
    individual customers, specifically health care providers, schools, and small businesses, to
    ensure they have current information about ways to address any cybersecurity

    vulnerabilities?
by
| | Reply
Post ID: @bk+1k7tr4qx4

No more H1Bs, Cisco is losing market shares like always? Shutting down Cisco?

by
| | Reply
Post ID: @bc+1k7tr4qx4

@a6 I disagree pal, I’m a new hire and utilize my Friday’s to leverage and prime my nutt for the weekend! Whether it’s smacking off during a call or closing my laptop entirely at noon to goon I prioritize my unit by prepping for a big weekend of clapping cheeks and uber priming a three way opportunity for myself!

by
| | Reply
Post ID: @ap+1k7tr4qx4

@a6, I can testify that what you said is true. Many of those with 20+ experience are let go and I am one of them. When I left Cisco, I know that Cisco has lost a chunk of Intellectual property (IP) that there is no way to recover. Cisco is in a downward spiral while ELT like Chuck and G2 continue to lie to its employees and customers.

by
| | Reply
Post ID: @an+1k7tr4qx4

That's what happens when they hire young inexperience folks at a higher salary for less quality work. They want to deliver as quickly as possible cause Friday's are video game days. Every week is a three day weekend for the young, while the old responsible folks (earning less than them - even after being with the company for 20+ years) drive into work to clean up their mess.
Not sure when these companies are going to learn to keep the older experience folks around and pay them well if they want quality products delivered to customers who are using the product for America's security. Any company that lays-off folks with 20+ experience are going to start seeing more and more of these problems cause young folks want to take shortcuts and not actually spend the time to verify all scenarios.

by
| | Reply
Post ID: @a6+1k7tr4qx4

Post a reply

: