Cisco To Pay $8.6 Million Fine For Selling Hackable Surveillance Tech (sfgate.com) 37
Cisco has agreed to pay $8.6 million to settle a claim that it sold video surveillance software it knew was vulnerable to hackers to hospitals, airports, schools, state governments and federal agencies. SFGate reports: The tech giant continued to sell the software and didn't fix the massive security weakness for about four years after a whistleblower alerted the company about it in 2008, according to a settlement unsealed Wednesday with the Justice Department and 15 states as well as the District of Columbia.
Hackers could use the flaw not just to spy on video footage but to turn surveillance cameras on and off, delete footage and even potentially compromise other connected physical security systems such as alarms or locks - all without being detected, according to Hamsa Mahendranathan, an attorney at Constantine Cannon, which represented whistleblower James Glenn. The settlement marks the first time a company has been forced to pay out under a federal whistleblower law for not having adequate cybersecurity protections.
Hackers could use the flaw not just to spy on video footage but to turn surveillance cameras on and off, delete footage and even potentially compromise other connected physical security systems such as alarms or locks - all without being detected, according to Hamsa Mahendranathan, an attorney at Constantine Cannon, which represented whistleblower James Glenn. The settlement marks the first time a company has been forced to pay out under a federal whistleblower law for not having adequate cybersecurity protections.
