Cisco Source Code Compromised

Cisco has not yet confirmed it, but according to articles on both CNet and eWeek, hackers may have managed to break into the Cisco network and steal all of the source code for IOS 12.3, approximately 800Mb worth of data. Cisco makes up more than 60% of the core router market on the Internet and IOS 12.3 is the latest and most current version of their popular operating system. Network and security administrators who rely on Cisco products should be aware that new exploits may be forthcoming based on the code. After the theft of a portion of the Microsoft Windows 2000 source code new exploits were created including the first ever Trojan to exploit bitmap images. A portion of the Cisco source code was leaked on a hacker Internet Relay Chat channel to prove the authenticity of the theft. Cisco products make up a significant portion of the backbone of the Internet so exploits generated by examining this source code could have a tremendous impact. Of course, it has yet to be confirmed so the story may be blown out of proportion at this time as well.

UPDATE: According to a Reuters report on the MSNBC web site, the FBI is assisting with the investigation into the possible theft of the Cisco IOS 12.3 source code. "Cisco said on Monday it was looking into reports that some of the software code used to run its gear that directs Internet traffic may have been stolen. The company did not say whether any of its code was actually stolen, or if so how much."