Cyberattacks fuel concerns about RSA SecurID breach

01.06.2011

The reported incidents are again stoking when RSA, which is now owned by , disclosed that it had been the victim of a sophisticated cyberattack.

RSA said that attackers had accessed code related to its SecurID two-factor authentication technology. While the stolen information could be used to reduce the effectiveness of SecurID, it would not enable a direct attack on SecurID customers, RSA said.

SecurID tokens are used in conjunction with passwords to deliver a second layer of authentication for system and network access. The technology is available from RSA in the form of hardware and software tokens that are capable of unique, one-time passwords every 60 seconds. More than 25,000 enterprises, many of them in the financial sector and government, currently use SecurID tokens to protect access to high-value applications and data.

RSA's refusal to publicly disclose what exactly was compromised -- combined with the attacks on Lockheed and L-3 -- are raising questions about how badly compromised SecurID really is.

"It seems like right now a lot of rumors are floating around," said Aleksandr Yampolskiy, director of security and compliance at Gilt Groupe. "If enterprises like Lockheed Martin are reporting that SecurID tokens were involved, then it's possible that some seeds plus details of the algorithm got revealed."