Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

RSA: SecurID could be vulnerable

Friday, March 18, 2011

RSA was recently the victim in a hacker which may have lead to information related to RSA’s SecurID two-factor authentication products being taken.

Art Coviello, executive chairman at RSA, informed the public about the attack in an open letter on RSA’s Web site. “Our investigation has led us to believe that the attack is in the category of an Advanced Persistent Threat (APT). Our investigation also revealed that the attack resulted in certain information being extracted from RSA’s systems,” the letter states.


The information taken will not enable a direct attack o the RSA SecurID customers but could be used to reduce its effectiveness as part of a larger attack. RSA is working to strengthen its systems.

Read the full letter here[end] 

OneLogin is now offering RSA SecurID technology as an integrated option on its cloud-based Identity & Access Management Service.

The SecurID feature will add a second layer of authentication to OneLogin in order to prevent unauthorized access to the product. To add the two-factor authentication, users may enter their personal password, along with a SecurID-generated one-time password.

read more »

Bedford, Mass.-based RSA announced that its SecurID can be integrated with the Microsoft Windows Active Directory Federation Services 2.0 (AD FS 2.0). This will enable organizations to provide secure user access to Office 365 cloud-based Web applications such as Microsoft Exchange technology.

read more »

The April meeting of the influential Government Smart Card Interagency Advisory Board (IAB) was recently held in Washington D.C. FIPS201.com was on hand to cover the event and has provided, as a service to the IAB and the smart card community, an audio recording of the presentations. Click on the link below to access a list of audio and accompanying PowerPoint slides (in pdf format).

read more »

Web designer and developer Gareth Wright has discovered security vulnerabilities in Facebook’s app for iOS and Android devices, reports MacRumors.com.

The flaw allows malicious users to access login credentials that are located in a .plist file connected to the app and use them to login to the stolen account on a different device.

read more »

Be first to comment...
Comment on this article

Your full name and URL will be displayed with your comment.

Your email is not shown or shared, and is used only for your Gravatar image.




characters left.