Kaspersky's USA website and Bitdefender's partner website hacked

[Webslinger]

http://www.itpro.co.uk/609806/kasperskys-us-website-hacked

 

[Webslinger]

http://www.itpro.co.uk/609806/kasperskys-us-website-hacked

and

http://www.theregister.co.uk/2009/02/10/kaspersky_promises_audit/

and

http://www.theregister.co.uk/2009/02/10/bitdefender_pt_breach/

 

[DrinkLyeAndDie]

It's always troubling when a security firm is hacked. Granted they are an AV vendor but they do also sell a firewall solution and they do focus on security. There is an expectation for a security provider to not be hacked by something as simple as an SQL injection attack. This most definitely negatively affects Kaspersky's integrity.

Most disturbing is their apparent lack of full disclosure. They are claiming the situation came to light and they closed the security lapse immediately. This doesn't seem to be the case and while I find a security breach of a security firm to be troubling the more troubling point is their cover-up of what happened and how long the data was exposed to anyone who knew how to get to it. The misinformation, if true, further errodes Kaspersky's integrity.

The Register has an article here that discusses the fact that the data was accessible to the hacker for days rather than a mere 30 minutes.

 

[Spirit Wolfe]

The Register has an article here that discusses the fact that the data was accessible to the hacker for days rather than a mere 30 minutes.

And as we all know with a well-placed snooper virus who knows how many other hackers or other non-related personnel got a hold of that classified information.

 

[Spirit Wolfe]

http://www.itpro.co.uk/609806/kasperskys-us-website-hacked

The following quote from the above article that Webslinger supplied:

Both the hackers and Kaspersky stressed that the attack was not malicious, and that no data was exploited due to the flaw. “Kaspersky['s] team doesn’t need to worry about us spreading their confidential stuff," the hackers said on their blog in response to a story on The Register.

“Our staff will never save or keep any confidential data. We just point our fingers to the big websites with security problems. We hope to see that vulnerability patched very soon (If it isn’t already patched).”

Reminded me of the same exact point being made in the scenario from the movie Live Free or Die Harder where the terrorist, Thomas Gabriel, played by, Timothy Olyphant, was trying to prove and did the exact same thing!