|
Lessons From the RSA Breach |
|
|
|
Source: CSO Online - Posted by Anthony Pell
|
In the world of ICT security "the fundamental threat landscape has changed" -- again -- in the past 18 months, says Andy Solterbeck, Australia-NZ general manager for security specialist RSA.
Embarrassingly, in March this year, RSA's own network was breached by an advanced attack, combining "social engineering" -- falsely gaining the confidence of employees -- with phishing, malware-infected emails and "privilege escalation" -- the attacker posing as one of the targeted personnel was able to use their network privileges to gain access indirectly to highly secure parts of the network.
RSA, which sells the SecurID two-factor authentication system, is convinced the attack came from a "nation-state actor"; an agency of government in an overseas country, says Solterbeck.
Read this full article at CSO Online
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
