The tech giant said a threat actor used voice phishing, or vishing, to repeatedly push MFA access requests for Cisco’s corporate network to an employee’s phone, until the worker either accidentally or through fatigue, accepted the request.
Cisco said it uncovered the breach on May 24 and “did not identify any impact to our business as a result of the incident.”