Sunday, March 20, 2011

Breach in RSA SecurID Systems

This past week, RSA announced that their very popular authentication token SecurID technology experienced a security breach. In the RSA press release, it was stated that a 'very sophisticated attack' was used to steal source code and other unspecified documents. Details about the breach are still sketchy and may endanger the security of the RSA token technology widely used by many organizations for two-factor authentication purposes.

An advanced persistent threat (APT) is mentioned in the RSA notice. According to other sources, this type of sophisticated attack was used against Google in China in 2009. Discussions, impact assessments, and industry analysis is occurring on a daily basis since this breach was announced. "What the RSA breach means for you (FAQ)" The next few weeks and months ahead will yield the true impact of this cyber threat.

No comments: