March 17, 2011
RSA announced that they had been hacked. They have sent out warnings to their customers that it seems that the hackers stole information related to their SecureID tokens.
Just imagine what this means. If their Tokens are compromised, then your SysAdmins and Security folks need to be a little more diligent in watching your networks and access points.
My question is, When will people learn to keep diligent in this ever changing Security environment? Just because you have certain protections in place, does not mean you are secure. You are secure based upon a slice of time. If you do not keep up with the latest trends, patches, fixes and in some ways technology, you are a target. Hell, you ARE a target no matter what. What are you doing to keep yourself as a never ending moving target?
Here is the article:
What is the product ? A very popular device to enable 2 factor authentication.
http://www.rsa.com/node.aspx?id=1156
Other Articles:
Additional Information
The link to the DELL information page, is helpful to some degree.
http://www.secureworks.com/research/threats/rsacompromise/
Open Letter from RSA: http://www.rsa.com/node.aspx?id=3872
More importantly, the SecurCare Online Note:
http://www.sec.gov/Archives/edgar/data/790070/000119312511070159/dex992.htm
In this note, there are recommendations that could be followed.