the recent threats like Shellshock , hacking in to the SIM cards at industrial scale , putting malware in Hard Disk Firmware (no one ever know that is possible) show that there is no way to make sure one vendor products/solutions is immune to threats VS the other vendors. It also shows that you cannot judge about a vendor corporation with advanced players in APT domain because those companies are American. but for me as Information security professional I am looking for IT company that can show me and my customers the way to find that we are compromised and give us solutions to mitigate the risks. always loyal to Cisco because of its value and great solutions but after those accusation against Cisco products I am under constant pressure to move away from Cisco (but I don’t do that and show them threats landscape are far from what they think) and replaced those large , robust , well designed , with cheap , poor features products from unknown vendors. I see some good response from Cisco to let their customers know about the threats and mitigation techniques (Like Cisco IOS/IOS XE integrity assurance documents) but those are not enough at all. we need some integrity tools to built in the software/hardware , more technical documents (like what Cisco did in recent Cisco Live 2015) and other ways that show Cisco is going address those threats.