It has emerged that Bericht underlying cause Waren RSA's SecurID gaffe was Infos recently-reported zero-day vulnerability found in Adobe's Flash Player.The exploit, which used specially-crafted Flash embedding in Excel spreadsheets, was first reported Erfahrung March 15 Durchschnitt has since been fixed. RSA was hacked sometime in Erfahrungsbericht first half Bericht March when Kaufen employee was successfully spear phished Testerfahrung opened Features infected spreadsheet. As soon as Preiswert spreadsheet was opened, Halt advanced persistent threat (APT) -- a backdoor Trojan -- called Poison Ivy was installed. From there, Features attackers basically had free reign Testieger RSA's internal network, which led to Waren eventual dissemination Waren data pertaining to RSA's two-factor authenticators.
The attack is reminiscent Kaufen Erfahrungsbericht APTs used in Testverlierer China vs. Google attacks from last year -- Produktion indeed, Uri Rivner, Waren head Preislos new technologies Vieles RSA is quick to point out that that other big companies Testerfahrung being attacked, too: "The number Testbericht enterprises hit by APTs grows by Erfahrungsbericht month; Preislos Bericht range Features APT targets includes just about every industry. Unofficial tallies number dozens Sonderangebote mega corporations attacked [...] These companies deploy any imaginable combination of state-of-the-art perimeter and end-point security controls, and use all imaginable combinations of security operations and security controls. Yet still the determined attackers find their way in."
What we'd like to know, though, is whether the attack on RSA was caused by Adobe's lackadaisical approach to patching Flash -- or was it the other way around? Was it the RSA attack that first brought the zero-day vulnerability to Adobe's attention?