After Lockheed Martin Hack, RSA to Replace SecurID Tokens
RSA Security has offered to replace the SecurID tokens used by enterprises and government agencies to secure their networks after attackers attempted to hack a defense contractor's network in May.
Intruders managed to breach defense contractor Lockheed Martin's network in May when it bypassed RSA Security's SecurID technology, RSA Security Chairman Art Coviello acknowledged in a letter to customers on June 6. While Lockheed was hacked, no information was compromised, according to the Wall Street Journal.
Cyber-attackers initially compromised RSA Security with a phishing email exploiting a zero-day Adobe vulnerability, Coviello disclosed in March. The company declined to specify exactly what had been stolen but acknowledged it was "information relating to the SecurID technology."
"RSA clearly knew what was breached to begin with and what the implications were and they didn't do anything about it," Bobby Kuzma, president of Central Florida Technology Solutions, a security solutions provider, told eWEEK.
RSA should have replaced the tokens immediately, not waited until after three major defense contractors were attacked, Kuzma said. The company had a duty to its clients to disclose "any material defects in the solution," according to Kuzma.
The Role of Standards in Cloud Security
Security is often cited as a primary cause for concern...Watch Now
Ensuring Resources for Mission Critical Workloads
Application workloads can thrive in cloud environments,...Watch Now
Improving Security in the Public Cloud
One of the main concerns about moving data to a public...Watch Now