Cisco Changes Privacy Policy in Cloud Connect Service

Jul 5, 2012 | Cloud

SOURCE: e-Week.com

Cisco Systems officials are trying to repair the damage from the rollout of its Connect Cloud service, which angered users of some of the company’s Linksys wireless routers who suddenly found they could no longer log in after an update, and then were told that Cisco was collecting their Internet histories.

The problems started after Cisco made its new Connect Cloud service available June 27. The service is designed to make it easy for consumers to connect their myriad mobile devices to their WiFi networks, and to manage those networks remotely via the mobile devices. Cisco officials said the service takes care of the various tasks involved with setting up and connecting devices to the network.

However, when the service went live, Cisco automatically pushed out an update for its new Linksys Smart WiFi routers, which the company introduced several months ago and has since reportedly sold more than 500,000. According to users, the update automatically connected the routers to the Cisco Connect Cloud, and users were unable to log in using the passwords they had used for their network management interface. Instead, they were asked to sign up for Connect Cloud.

At the same time, security concerns were quickly raised over a graph in the privacy policy for Connect Cloud. According to the policy, Cisco essentially could collect a wide variety of information on users, from their Internet histories to the status of the network to the Connect Cloud-related apps they’re using. The information was needed to help Cisco better respond to concerns and requests, or improve the service.

At a time when Web users are particularly keyed into issues of privacy—as illustrated by the uproars caused by Facebook, Google and similar Web companies when they make changes in their policies—the reaction to Cisco’s maneuvers was quick and strident on such Websites as Slashdot.

“This is typical of the short-term thinking that is all too common among corporations today,” one user wrote on Slashdot. “They’re throwing away their credibility with professional users—you know, the ones who buy the expensive Cisco gear that generates most of their profits—so they can grab a few quick bucks by data-mining the consumer market.”

“I’ll never buy another Linksys product,” said another person. “I don’t want remote administration from the public Internet side of a router.”

Cisco officials have been trying to calm the roiling waters since. The company has replaced the original offending security policy graph with a more benign one—including removing the part about collecting users’ Internet histories. In addition, in a blog post June 29, Brett Wingo, vice president and general manager of Cisco’s Home Networking unit, assured users that the company did not intend to violate their sense of privacy.

“Cisco prides itself on offering the best customer experiences, and privacy and security are at the core of everything we do,” Wingo wrote. “That goes for Cisco Connect Cloud, too. When a customer signs up for a Cisco Connect Cloud account, personal information is used only to establish an account in order to provide customer support. Consistent with Cisco’s practices, Cisco Connect Cloud does not actively track, collect or store personal info or usage data for any other purposes, nor is it transmitted to third parties.”

Cisco officials also are looking to better explain issues surrounding the automatic firmware updates and Connect Cloud options. On the company’s Website, officials laid out instructions for returning the router’s firmware to its original status and ensuring that users no longer get automatic upgrades. Users also can call Linksys customer support at 800-326-7114, and a customer service agent will walk them through the process of reverting the router back to its traditional set up.

Wingo also addressed it in his blog. “Cisco Connect Cloud was delivered only to consumers who opted in to automatic updates,” he said. “However, we apologize that the opt-out process for Cisco Connect Cloud and automatic updates was not more clear in this product release, and we are developing an updated version that will improve this process.”

Wingo said that Cisco takes the feedback it’s gotten seriously, but hoped that despite the problems, users will “give Cisco Connect Cloud a try, though. I think you’ll find it’s a great way to simplify how you connect, control and interact with your connected devices, including personal entertainment and home appliances.”

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more