Son of a Breach

This morning (day before a long holiday weekend), news of a breach at Lockheed Martin was made public.

On March 18, NSS Labs issued an analysis brief on the RSA breach. At that time, we predicted that this was "a strategic move to grab the virtual keys to RSA’s customers – who are the most security conscious in the world. One or several RSA clients are likely the ultimate target of this attack. Military, financial, governmental, and other organizations with critical intellectual property, plans and finances are at risk… NSS Labs expects a string of breaches stemming from this event."

Since then, there have been malware and phishing campaigns in the wild seeking specific data linking RSA tokens to the end-user, leading us to believe that this attack was carried out by the original RSA attackers. Given the military targets, and that millions of compromised keys are in circulation, this is not over.

The original brief on the RSA Breach.