Researcher Michael Lynn quit his job at Internet Security Systems late last month, then defied ISS and Cisco by revealing that unpatched Cisco routers could be hacked by a buffer-overflow exploit. Until then, corporate network managers had been largely unaware of the risk.